< Back
Export-GPOPermissions
Post
NAME Export-GPOPermissions
SYNOPSIS
Exports all of the permission information of GPOs to a JSON file.
SYNTAX
Export-GPOPermissions [-DisplayNames] <String[]> [-Destination] <String> [[-Domain] <String>] [-Credential
<PSCredential>] [-PassThru] [<CommonParameters>]
Export-GPOPermissions [-All] [-Destination] <String> [[-Domain] <String>] [-Credential <PSCredential>] [-PassThru]
[<CommonParameters>]
DESCRIPTION
The cmdlet uses the get Get-GPPermission command to get initial information. Any GPOs with custom permissions have
their permissions enumerated via ACL. All of the permissions are written to a JSON file that can be used with
Import-GPPermissionsFromJson.
PARAMETERS
-DisplayNames <String[]>
The names of the GPOs whose permissions should be backed up.
Required? true
Position? 1
Default value
Accept pipeline input? false
Accept wildcard characters? false
-All [<SwitchParameter>]
Specifies that all GPOs should have their permissions backed up.
Required? true
Position? 1
Default value False
Accept pipeline input? false
Accept wildcard characters? false
-Destination <String>
The file that should be created with the permission information. If the file exists, the content will be
overwritten.
Required? true
Position? 2
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Domain <String>
The domain from which to backup GPO permissions in. This defaults to the domain of the current user.
Required? false
Position? 3
Default value [System.String]::Empty
Accept pipeline input? false
Accept wildcard characters? false
-Credential <PSCredential>
Specifies a user account that has permission to perform this action. The default is the current user.
Type a user name, such as "User01" or "Domain01\\User01", or enter a PSCredential object, such as one generated
by the Get-Credential cmdlet. If you type a user name, you will be prompted for a password.
Required? false
Position? named
Default value [System.Management.Automation.PSCredential]::Empty
Accept pipeline input? false
Accept wildcard characters? false
-PassThru [<SwitchParameter>]
Required? false
Position? named
Default value False
Accept pipeline input? false
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
None
OUTPUTS
None
NOTES
AUTHOR: Michael Haken
LAST UPDATE: 1/4/2017
-------------------------- EXAMPLE 1 --------------------------
PS C:\\>Export-GPOPermissions -All -Destination c:\\GPPermissions.json
Exports all of the GPO permissions to c:\\GPPermissions.json
-------------------------- EXAMPLE 2 --------------------------
PS C:\\>Export-GPOPermissions -DisplayNames @("Default Domain Policy","Default Domain Controllers Policy")
-Destination c:\\GPPermissions.json
Exports the permissions for the Default Domain Policy and Default Domain Controllers Policy to
c:\\GPPermissions.json
RELATED LINKS
SYNOPSIS
Exports all of the permission information of GPOs to a JSON file.
SYNTAX
Export-GPOPermissions [-DisplayNames] <String[]> [-Destination] <String> [[-Domain] <String>] [-Credential
<PSCredential>] [-PassThru] [<CommonParameters>]
Export-GPOPermissions [-All] [-Destination] <String> [[-Domain] <String>] [-Credential <PSCredential>] [-PassThru]
[<CommonParameters>]
DESCRIPTION
The cmdlet uses the get Get-GPPermission command to get initial information. Any GPOs with custom permissions have
their permissions enumerated via ACL. All of the permissions are written to a JSON file that can be used with
Import-GPPermissionsFromJson.
PARAMETERS
-DisplayNames <String[]>
The names of the GPOs whose permissions should be backed up.
Required? true
Position? 1
Default value
Accept pipeline input? false
Accept wildcard characters? false
-All [<SwitchParameter>]
Specifies that all GPOs should have their permissions backed up.
Required? true
Position? 1
Default value False
Accept pipeline input? false
Accept wildcard characters? false
-Destination <String>
The file that should be created with the permission information. If the file exists, the content will be
overwritten.
Required? true
Position? 2
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Domain <String>
The domain from which to backup GPO permissions in. This defaults to the domain of the current user.
Required? false
Position? 3
Default value [System.String]::Empty
Accept pipeline input? false
Accept wildcard characters? false
-Credential <PSCredential>
Specifies a user account that has permission to perform this action. The default is the current user.
Type a user name, such as "User01" or "Domain01\\User01", or enter a PSCredential object, such as one generated
by the Get-Credential cmdlet. If you type a user name, you will be prompted for a password.
Required? false
Position? named
Default value [System.Management.Automation.PSCredential]::Empty
Accept pipeline input? false
Accept wildcard characters? false
-PassThru [<SwitchParameter>]
Required? false
Position? named
Default value False
Accept pipeline input? false
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
None
OUTPUTS
None
NOTES
AUTHOR: Michael Haken
LAST UPDATE: 1/4/2017
-------------------------- EXAMPLE 1 --------------------------
PS C:\\>Export-GPOPermissions -All -Destination c:\\GPPermissions.json
Exports all of the GPO permissions to c:\\GPPermissions.json
-------------------------- EXAMPLE 2 --------------------------
PS C:\\>Export-GPOPermissions -DisplayNames @("Default Domain Policy","Default Domain Controllers Policy")
-Destination c:\\GPPermissions.json
Exports the permissions for the Default Domain Policy and Default Domain Controllers Policy to
c:\\GPPermissions.json
RELATED LINKS