mirror of
https://github.com/EvotecIT/GPOZaurr.git
synced 2026-08-06 17:09:28 +00:00
Przemyslaw Klys
19 lines
874 B
PowerShell
19 lines
874 B
PowerShell
Import-Module "$PSScriptRoot\..\GPoZaurr.psd1" -Force
|
|
|
|
# Step 1 - Create report
|
|
$Report = Get-GPOZaurrPermission -Type All
|
|
$Report | ConvertTo-Excel -FilePath $Env:UserProfile\Desktop\GPOOutput.xlsx -ExcelWorkSheetName 'GPO Permissions Before' -AutoFilter -AutoFit
|
|
|
|
# Step 2 - Verify couple of GPOS returned with whatif
|
|
#Remove-GPOZaurrPermission -Verbose -Type Unknown -LimitProcessing 4 -WhatIf
|
|
|
|
# Step 3 - Confirm the change without whatif
|
|
#Remove-GPOZaurrPermission -Verbose -Type Unknown -LimitProcessing 4
|
|
|
|
# Step 4 - Analyze GPO manually to confirm only unknown sids were removed
|
|
|
|
# Step 5 - if everything went ok, continue process without whatif
|
|
|
|
# Step-6 - Generate new report
|
|
#$Report = Get-GPOZaurrPermission -Type All
|
|
#$Report | ConvertTo-Excel -FilePath $Env:UserProfile\Desktop\GPOOutput.xlsx -ExcelWorkSheetName 'GPO Permissions After' -AutoFilter -AutoFit |