GPOZaurr/Docs/Get-GPOZaurrBroken.md

external help file, Module Name, online version, schema

external help file	Module Name	online version	schema
GPOZaurr-help.xml	GPOZaurr		2.0.0

Get-GPOZaurrBroken

SYNOPSIS

Detects broken or otherwise damaged Group Policies

SYNTAX

Get-GPOZaurrBroken [[-Forest] <String>] [[-ExcludeDomains] <String[]>] [[-ExcludeDomainControllers] <String[]>]
 [[-IncludeDomains] <String[]>] [[-IncludeDomainControllers] <String[]>] [-SkipRODC]
 [[-ExtendedForestInformation] <IDictionary>] [-VerifyDomainControllers] [<CommonParameters>]

DESCRIPTION

Detects broken or otherwise damaged Group Policies providing insight whether GPO exists in both AD and SYSVOL. It provides few statuses:

• Permissions issue - means account couldn't read GPO due to permissions
• ObjectClass issue - means that ObjectClass is of type Container, rather than expected groupPolicyContainer
• Not available on SYSVOL - means SYSVOL data is missing, yet AD metadata is available
• Not available in AD - means AD metadata is missing, yet SYSVOL data is available
• Exists - means AD metadata and SYSVOL data are available

EXAMPLES

EXAMPLE 1

Get-GPOZaurrBroken -Verbose | Format-Table

PARAMETERS

-Forest

Target different Forest, by default current forest is used

Type: String
Parameter Sets: (All)
Aliases: ForestName

Required: False
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ExcludeDomains

Exclude domain from search, by default whole forest is scanned

Type: String[]
Parameter Sets: (All)
Aliases:

Required: False
Position: 2
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ExcludeDomainControllers

Exclude specific domain controllers, by default there are no exclusions, as long as VerifyDomainControllers switch is enabled. Otherwise this parameter is ignored.

Type: String[]
Parameter Sets: (All)
Aliases:

Required: False
Position: 3
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-IncludeDomains

Include only specific domains, by default whole forest is scanned

Type: String[]
Parameter Sets: (All)
Aliases: Domain, Domains

Required: False
Position: 4
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-IncludeDomainControllers

Include only specific domain controllers, by default all domain controllers are included, as long as VerifyDomainControllers switch is enabled. Otherwise this parameter is ignored.

Type: String[]
Parameter Sets: (All)
Aliases: DomainControllers

Required: False
Position: 5
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SkipRODC

Skip Read-Only Domain Controllers. By default all domain controllers are included.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ExtendedForestInformation

Ability to provide Forest Information from another command to speed up processing

Type: IDictionary
Parameter Sets: (All)
Aliases:

Required: False
Position: 6
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-VerifyDomainControllers

Forces cmdlet to check GPO Existance on Domain Controllers rather then per domain

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES

General notes

RELATED LINKS