API Reference
Class
GpoPermissionConsistencyService
Provides a COM-free approximation of the GPOZaurr permission consistency report by comparing AD and SYSVOL access levels.
Inheritance
- Object
- GpoPermissionConsistencyService
Methods
public static View Get(String domainName, Boolean verifyInheritance = false, Boolean includeConsistent = false, Int32 maxGpos = 50000, Int32 sysvolScanCap = 2000) #Returns:
ViewCollects permission consistency rows with explicit success/failure signaling.
Parameters
- domainName System.String
- DNS domain name.
- verifyInheritance System.Boolean = false
- When true, performs a best-effort scan for broken inheritance inside SYSVOL folders.
- includeConsistent System.Boolean = false
- When true, emits compliant rows as well as inconsistent ones.
- maxGpos System.Int32 = 50000
- Maximum number of GPOs to process.
- sysvolScanCap System.Int32 = 2000
- Maximum number of filesystem entries to scan per GPO when verifyInheritance is enabled.
Returns
Collection snapshot with consistency rows and status metadata.
public static IReadOnlyList<GpoPermissionConsistency> GetStatus(String domainName, Boolean verifyInheritance = false, Boolean includeConsistent = false, Int32 maxGpos = 50000, Int32 sysvolScanCap = 2000) #Returns:
IReadOnlyList<GpoPermissionConsistency>Enumerates permission consistency rows for GPOs in a domain.
Parameters
- domainName System.String
- DNS domain name.
- verifyInheritance System.Boolean = false
- When true, performs a best-effort scan for broken inheritance inside SYSVOL folders.
- includeConsistent System.Boolean = false
- When true, emits compliant rows as well as inconsistent ones.
- maxGpos System.Int32 = 50000
- Maximum number of GPOs to process.
- sysvolScanCap System.Int32 = 2000
- Maximum number of filesystem entries to scan per GPO when verifyInheritance is enabled.
Returns
Consistency rows (best-effort; skips GPOs that cannot be read).