Get-ADXGpoScriptSecurity

Namespace ADPlayground.PowerShell

Outputs

ADPlayground.Gpo.ScriptSecurityReport

Analyzes GPO scripts and referenced UNC paths for risky ACLs, plaintext credentials, and nonexistent shares.

Examples

Authored help example

Example 1


Get-ADXGpoScriptSecurity -Domain 'contoso.com' -Name 'Default Domain Policy'

Example 2


Get-ADXGpoScriptSecurity -Domain 'contoso.com' -Id '31B2F340-016D-11D2-945F-00C04FB984F9'

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Get-ADXGpoScriptSecurity -Name <string> [-Domain <string>] [-IncludeAcl] [<CommonParameters>]

Parameter set: By Name

Parameters

Name string requiredposition: namedpipeline: false: GPO display name (alternative to -Id).
Domain string optionalposition: namedpipeline: false: DNS domain name hosting the GPO; defaults to current domain.
IncludeAcl SwitchParameter optionalposition: namedpipeline: false: Include ACL lookup for referenced UNC paths (NETLOGON/SYSVOL) and script files.

Outputs

ADPlayground.Gpo.ScriptSecurityReport

Get-ADXGpoScriptSecurity -Id <Guid> [-Domain <string>] [-IncludeAcl] [<CommonParameters>]

Parameter set: By Id

Parameters

Id Guid requiredposition: namedpipeline: false: GPO GUID (groupPolicyContainer objectGuid).
Domain string optionalposition: namedpipeline: false: DNS domain name hosting the GPO; defaults to current domain.
IncludeAcl SwitchParameter optionalposition: namedpipeline: false: Include ACL lookup for referenced UNC paths (NETLOGON/SYSVOL) and script files.

Outputs

ADPlayground.Gpo.ScriptSecurityReport

Get-ADXGpoScriptSecurity [-Domain <string>] [-IncludeAcl] [<CommonParameters>]

Parameter set: Set 3

Parameters

Domain string optionalposition: namedpipeline: false: DNS domain name hosting the GPO; defaults to current domain.
IncludeAcl SwitchParameter optionalposition: namedpipeline: false: Include ACL lookup for referenced UNC paths (NETLOGON/SYSVOL) and script files.

Outputs

ADPlayground.Gpo.ScriptSecurityReport

Get-ADXGpoScriptSecurity -Forest [-IncludeAcl] [<CommonParameters>]

Parameter set: By Forest

Parameters

Forest SwitchParameter requiredposition: namedpipeline: false: Scan all domains in the current forest.
IncludeAcl SwitchParameter optionalposition: namedpipeline: false: Include ACL lookup for referenced UNC paths (NETLOGON/SYSVOL) and script files.

Outputs

ADPlayground.Gpo.ScriptSecurityReport