diff --git a/src/en-us/PSGPPreferences-help.xml b/src/en-us/PSGPPreferences-help.xml index ca64369..0f8d92c 100644 --- a/src/en-us/PSGPPreferences-help.xml +++ b/src/en-us/PSGPPreferences-help.xml @@ -10,16 +10,16 @@ - Use this function to add a group into a Group Policy Object. First you have to create a new group object using New-GPPGroup. This function is useful if you want to add the same group object into several Group Policy objects. If you just want to create a single group and add it into a GPO immediately, you can just use the -GPOName/GPOId parameter at New-GPPGroup. + Use this function to add a group into a Group Policy Object. First you have to create a new group definition object using New-GPPGroup. This function is useful if you want to add the same group definition into several Group Policy objects. If you just want to create a single group and add it into a GPO immediately, you can just use the -GPOName/GPOId parameter at New-GPPGroup. Add-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -32,9 +32,9 @@ GPOId - + Specifies a Group Policy object ID into which you want to add a group. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -44,9 +44,9 @@ InputObject - - Specifies an object of a group which you want to add into a GPO. You can create one with New-GPPGroup. - + + Specifies an object of a group definition which you want to add into a GPO. You can create one with New-GPPGroup. + GPPItemGroup GPPItemGroup @@ -59,9 +59,9 @@ Add-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -74,9 +74,9 @@ GPOName - + Specifies a Group Policy object name into which you want to add a group. - + String String @@ -86,9 +86,9 @@ InputObject - - Specifies an object of a group which you want to add into a GPO. You can create one with New-GPPGroup. - + + Specifies an object of a group definition which you want to add into a GPO. You can create one with New-GPPGroup. + GPPItemGroup GPPItemGroup @@ -101,9 +101,9 @@ Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + GPPContext GPPContext @@ -113,9 +113,9 @@ GPOId - + Specifies a Group Policy object ID into which you want to add a group. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -125,9 +125,9 @@ GPOName - + Specifies a Group Policy object name into which you want to add a group. - + String String @@ -137,9 +137,9 @@ InputObject - - Specifies an object of a group which you want to add into a GPO. You can create one with New-GPPGroup. - + + Specifies an object of a group definition which you want to add into a GPO. You can create one with New-GPPGroup. + GPPItemGroup GPPItemGroup @@ -185,7 +185,7 @@ -------------------------- Example 2 -------------------------- PS C:\> Add-GPPGroup -InputObject $GroupObject -GPOId '31B2F340-016D-11D2-945F-00C04FB984F9' - Adds a group object $GroupObject into a Group Policy by using its ID (see the description for the -GPOId parameter below). + Adds a group definition object $GroupObject into a Group Policy by using its ID (see the description for the -GPOId parameter below). @@ -208,9 +208,9 @@ Add-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -223,9 +223,9 @@ GPOId - + Specifies the ID of a GPO where the target group is. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -235,9 +235,9 @@ GroupUID - + Specifies the UID of a target group. UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + Guid Guid @@ -247,9 +247,9 @@ InputObject - + Specifies a member object to add. Use New-GPPGroupMember to create one. - + GPPItemGroupMember GPPItemGroupMember @@ -262,9 +262,9 @@ Add-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -277,9 +277,9 @@ GPOId - + Specifies the ID of a GPO where the target group is. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -289,9 +289,9 @@ GroupSID - + Specifies the SID of a target group. - + SecurityIdentifier SecurityIdentifier @@ -301,9 +301,9 @@ InputObject - + Specifies a member object to add. Use New-GPPGroupMember to create one. - + GPPItemGroupMember GPPItemGroupMember @@ -316,9 +316,9 @@ Add-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -331,9 +331,9 @@ GPOId - + Specifies the ID of a GPO where the target group is. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -343,9 +343,9 @@ GroupName - + Specifies the name of a target group. - + String String @@ -355,9 +355,9 @@ InputObject - + Specifies a member object to add. Use New-GPPGroupMember to create one. - + GPPItemGroupMember GPPItemGroupMember @@ -370,9 +370,9 @@ Add-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -385,9 +385,9 @@ GPOName - + Specifies the name of a GPO where the target group is. - + String String @@ -397,9 +397,9 @@ GroupUID - + Specifies the UID of a target group. UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + Guid Guid @@ -409,9 +409,9 @@ InputObject - + Specifies a member object to add. Use New-GPPGroupMember to create one. - + GPPItemGroupMember GPPItemGroupMember @@ -424,9 +424,9 @@ Add-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -439,9 +439,9 @@ GPOName - + Specifies the name of a GPO where the target group is. - + String String @@ -451,9 +451,9 @@ GroupSID - + Specifies the SID of a target group. - + SecurityIdentifier SecurityIdentifier @@ -463,9 +463,9 @@ InputObject - + Specifies a member object to add. Use New-GPPGroupMember to create one. - + GPPItemGroupMember GPPItemGroupMember @@ -478,9 +478,9 @@ Add-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -493,9 +493,9 @@ GPOName - + Specifies the name of a GPO where the target group is. - + String String @@ -505,9 +505,9 @@ GroupName - + Specifies the name of a target group. - + String String @@ -517,9 +517,9 @@ InputObject - + Specifies a member object to add. Use New-GPPGroupMember to create one. - + GPPItemGroupMember GPPItemGroupMember @@ -532,9 +532,9 @@ Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + GPPContext GPPContext @@ -544,9 +544,9 @@ GPOId - + Specifies the ID of a GPO where the target group is. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -556,9 +556,9 @@ GPOName - + Specifies the name of a GPO where the target group is. - + String String @@ -568,9 +568,9 @@ GroupName - + Specifies the name of a target group. - + String String @@ -580,9 +580,9 @@ GroupSID - + Specifies the SID of a target group. - + SecurityIdentifier SecurityIdentifier @@ -592,9 +592,9 @@ GroupUID - + Specifies the UID of a target group. UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + Guid Guid @@ -604,9 +604,9 @@ InputObject - + Specifies a member object to add. Use New-GPPGroupMember to create one. - + GPPItemGroupMember GPPItemGroupMember @@ -660,6 +660,197 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 + + + Add-GPPUser + Add + GPPUser + + Adds a user item into a Group Policy Object + + + + Use this function to add a user into a Group Policy Object. First you have to create a new user definition object using New-GPPUser. This function is useful if you want to add the same user definition into several Group Policy objects. If you just want to create a single user and add it into a GPO immediately, you can just use the -GPOName/GPOId parameter of New-GPPGroup. + + + + Add-GPPUser + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies a Group Policy object ID into which you want to add a user. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + InputObject + + Specifies an object of a user definition which you want to add into a GPO. You can create one with New-GPPUser. + + GPPItemUser + + GPPItemUser + + + None + + + + Add-GPPUser + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies a Group Policy object name into which you want to add a user. + + String + + String + + + None + + + InputObject + + Specifies an object of a user definition which you want to add into a GPO. You can create one with New-GPPUser. + + GPPItemUser + + GPPItemUser + + + None + + + + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies a Group Policy object ID into which you want to add a user. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GPOName + + Specifies a Group Policy object name into which you want to add a user. + + String + + String + + + None + + + InputObject + + Specifies an object of a user definition which you want to add into a GPO. You can create one with New-GPPUser. + + GPPItemUser + + GPPItemUser + + + None + + + + + + None + + + + + + + + + + System.Void + + + + + + + + + + + + + + -------------------------- Example 1 -------------------------- + PS C:\> Add-GPPUser -InputObject $UserObject -GPOName 'TEST' + + Adds a user definition object $Userbject into a Group Policy named TEST. + + + + -------------------------- Example 2 -------------------------- + PS C:\> Add-GPPUser -InputObject $UserObject -GPOId '31B2F340-016D-11D2-945F-00C04FB984F9' + + Adds a user definition object $UserObject into a Group Policy by using its ID (see the description for the -GPOId parameter below). + + + + + Get-GPPGroup @@ -677,9 +868,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -692,9 +883,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -704,9 +895,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Name - + Specifies the name of a group you want to retrieve. Supports wildcards. - + String String @@ -719,9 +910,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -734,9 +925,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -746,9 +937,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Name - + Specifies the name of a group you want to retrieve. Supports wildcards. - + String String @@ -761,9 +952,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -776,9 +967,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -788,9 +979,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 LiteralName - + Name of a group you want to retrieve. Does NOT support wildcards. - + String String @@ -803,9 +994,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -818,9 +1009,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -830,9 +1021,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 LiteralName - + Name of a group you want to retrieve. Does NOT support wildcards. - + String String @@ -845,9 +1036,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -860,9 +1051,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -872,9 +1063,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - + Specifies the SID of a group you want to retrieve. - + SecurityIdentifier SecurityIdentifier @@ -887,9 +1078,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -902,9 +1093,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -914,9 +1105,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - + Specifies the SID of a group you want to retrieve. - + SecurityIdentifier SecurityIdentifier @@ -929,9 +1120,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -944,9 +1135,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -956,9 +1147,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 UID - - Specifies the UID of a group you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + + Specifies the UID of a group definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property. + Guid Guid @@ -971,9 +1162,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -986,9 +1177,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -998,9 +1189,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 UID - - Specifies the UID of a group you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + + Specifies the UID of a group definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property. + Guid Guid @@ -1013,9 +1204,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroup GPPSection - - You can use this parameter to easily extract group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. - + + You can use this parameter to easily extract group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + GPPSection GPPSection @@ -1025,9 +1216,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Name - + Specifies the name of a group you want to retrieve. Supports wildcards. - + String String @@ -1040,9 +1231,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroup GPPSection - - You can use this parameter to easily extract group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. - + + You can use this parameter to easily extract group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + GPPSection GPPSection @@ -1052,9 +1243,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 LiteralName - + Name of a group you want to retrieve. Does NOT support wildcards. - + String String @@ -1067,9 +1258,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroup GPPSection - - You can use this parameter to easily extract group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. - + + You can use this parameter to easily extract group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + GPPSection GPPSection @@ -1079,9 +1270,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - + Specifies the SID of a group you want to retrieve. - + SecurityIdentifier SecurityIdentifier @@ -1094,9 +1285,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroup GPPSection - - You can use this parameter to easily extract group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. - + + You can use this parameter to easily extract group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + GPPSection GPPSection @@ -1106,9 +1297,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 UID - - Specifies the UID of a group you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + + Specifies the UID of a group definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property. + Guid Guid @@ -1121,9 +1312,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + GPPContext GPPContext @@ -1133,9 +1324,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -1145,9 +1336,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -1157,9 +1348,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPPSection - - You can use this parameter to easily extract group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. - + + You can use this parameter to easily extract group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + GPPSection GPPSection @@ -1169,9 +1360,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 LiteralName - + Name of a group you want to retrieve. Does NOT support wildcards. - + String String @@ -1181,9 +1372,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Name - + Specifies the name of a group you want to retrieve. Supports wildcards. - + String String @@ -1193,9 +1384,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - + Specifies the SID of a group you want to retrieve. - + SecurityIdentifier SecurityIdentifier @@ -1205,9 +1396,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 UID - - Specifies the UID of a group you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + + Specifies the UID of a group definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property. + Guid Guid @@ -1246,21 +1437,21 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 -------------------------- Example 1 -------------------------- PS C:\> Get-GPPGroup -Name 'TEST-*' -GPOName 'Custom Group Policy' - Returns all groups which names start with "TEST-" from a GPO called "Custom Group Policy". + Returns all group definitions where group name starts with "TEST-" from a GPO called "Custom Group Policy". -------------------------- Example 2 -------------------------- PS C:\> Get-GPPGroup -LiteralName 'TEST-*' -GPOId '70f86590-588a-4659-8880-3d2374604811' - Returns all groups which name is "TEST-*" from a GPO with an ID "70f86590-588a-4659-8880-3d2374604811". + Returns all group definitions where group name is "TEST-*" from a GPO with an ID "70f86590-588a-4659-8880-3d2374604811". -------------------------- Example 3 -------------------------- PS C:\> Get-GPPGroup -UID '3B1BF433-38BF-47A5-925C-3DC32B6555B3' -GPOName 'Custom Group Policy' - Returns a group with a UID "3B1BF433-38BF-47A5-925C-3DC32B6555B3" from a GPO called "Custom Group Policy". + Returns a group definition with a UID "3B1BF433-38BF-47A5-925C-3DC32B6555B3" from a GPO called "Custom Group Policy". @@ -1283,9 +1474,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -1298,9 +1489,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -1310,9 +1501,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupUID - + Specifies the UID of a group from which you want to get a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + Guid Guid @@ -1322,9 +1513,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Name - + Specifies the name of a member which you want to retrieve. Supports wildcards. - + String String @@ -1337,9 +1528,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -1352,9 +1543,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -1364,9 +1555,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupSID - + Specifies the SID of a group from which you want to get a member. - + SecurityIdentifier SecurityIdentifier @@ -1376,9 +1567,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Name - + Specifies the name of a member which you want to retrieve. Supports wildcards. - + String String @@ -1391,9 +1582,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -1406,9 +1597,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -1418,9 +1609,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupName - + Specifies the name of a group from which you want to get a member. - + String String @@ -1430,9 +1621,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Name - + Specifies the name of a member which you want to retrieve. Supports wildcards. - + String String @@ -1445,9 +1636,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -1460,9 +1651,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -1472,9 +1663,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupUID - + Specifies the UID of a group from which you want to get a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + Guid Guid @@ -1484,9 +1675,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 LiteralName - + Specifies the name of a member which you want to retrieve. Does NOT support wildcards. - + String String @@ -1499,9 +1690,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -1514,9 +1705,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -1526,9 +1717,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupSID - + Specifies the SID of a group from which you want to get a member. - + SecurityIdentifier SecurityIdentifier @@ -1538,9 +1729,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 LiteralName - + Specifies the name of a member which you want to retrieve. Does NOT support wildcards. - + String String @@ -1553,9 +1744,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -1568,9 +1759,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -1580,9 +1771,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupName - + Specifies the name of a group from which you want to get a member. - + String String @@ -1592,9 +1783,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 LiteralName - + Specifies the name of a member which you want to retrieve. Does NOT support wildcards. - + String String @@ -1607,9 +1798,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -1622,9 +1813,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -1634,9 +1825,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupUID - + Specifies the UID of a group from which you want to get a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + Guid Guid @@ -1646,9 +1837,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - + Specifies the SID of a member which you want to retrieve. - + SecurityIdentifier SecurityIdentifier @@ -1661,9 +1852,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -1676,9 +1867,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -1688,9 +1879,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupSID - + Specifies the SID of a group from which you want to get a member. - + SecurityIdentifier SecurityIdentifier @@ -1700,9 +1891,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - + Specifies the SID of a member which you want to retrieve. - + SecurityIdentifier SecurityIdentifier @@ -1715,9 +1906,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -1730,9 +1921,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -1742,9 +1933,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupName - + Specifies the name of a group from which you want to get a member. - + String String @@ -1754,9 +1945,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - + Specifies the SID of a member which you want to retrieve. - + SecurityIdentifier SecurityIdentifier @@ -1769,9 +1960,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -1784,9 +1975,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -1796,9 +1987,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupUID - + Specifies the UID of a group from which you want to get a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + Guid Guid @@ -1808,9 +1999,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Name - + Specifies the name of a member which you want to retrieve. Supports wildcards. - + String String @@ -1823,9 +2014,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -1838,9 +2029,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -1850,9 +2041,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupSID - + Specifies the SID of a group from which you want to get a member. - + SecurityIdentifier SecurityIdentifier @@ -1862,9 +2053,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Name - + Specifies the name of a member which you want to retrieve. Supports wildcards. - + String String @@ -1877,9 +2068,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -1892,9 +2083,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -1904,9 +2095,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupName - + Specifies the name of a group from which you want to get a member. - + String String @@ -1916,9 +2107,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Name - + Specifies the name of a member which you want to retrieve. Supports wildcards. - + String String @@ -1931,9 +2122,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -1946,9 +2137,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -1958,9 +2149,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupUID - + Specifies the UID of a group from which you want to get a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + Guid Guid @@ -1970,9 +2161,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 LiteralName - + Specifies the name of a member which you want to retrieve. Does NOT support wildcards. - + String String @@ -1985,9 +2176,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -2000,9 +2191,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -2012,9 +2203,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupSID - + Specifies the SID of a group from which you want to get a member. - + SecurityIdentifier SecurityIdentifier @@ -2024,9 +2215,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 LiteralName - + Specifies the name of a member which you want to retrieve. Does NOT support wildcards. - + String String @@ -2039,9 +2230,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -2054,9 +2245,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -2066,9 +2257,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupName - + Specifies the name of a group from which you want to get a member. - + String String @@ -2078,9 +2269,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 LiteralName - + Specifies the name of a member which you want to retrieve. Does NOT support wildcards. - + String String @@ -2093,9 +2284,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -2108,9 +2299,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -2120,9 +2311,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupUID - + Specifies the UID of a group from which you want to get a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + Guid Guid @@ -2132,9 +2323,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - + Specifies the SID of a member which you want to retrieve. - + SecurityIdentifier SecurityIdentifier @@ -2147,9 +2338,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -2162,9 +2353,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -2174,9 +2365,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupSID - + Specifies the SID of a group from which you want to get a member. - + SecurityIdentifier SecurityIdentifier @@ -2186,9 +2377,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - + Specifies the SID of a member which you want to retrieve. - + SecurityIdentifier SecurityIdentifier @@ -2201,9 +2392,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Get-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -2216,9 +2407,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -2228,9 +2419,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupName - + Specifies the name of a group from which you want to get a member. - + String String @@ -2240,9 +2431,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - + Specifies the SID of a member which you want to retrieve. - + SecurityIdentifier SecurityIdentifier @@ -2255,9 +2446,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + GPPContext GPPContext @@ -2267,9 +2458,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + Guid Guid @@ -2279,9 +2470,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - + Specifies the name of a GPO in which you want to search for groups. - + String String @@ -2291,9 +2482,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupName - + Specifies the name of a group from which you want to get a member. - + String String @@ -2303,9 +2494,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupSID - + Specifies the SID of a group from which you want to get a member. - + SecurityIdentifier SecurityIdentifier @@ -2315,9 +2506,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GroupUID - + Specifies the UID of a group from which you want to get a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + Guid Guid @@ -2327,9 +2518,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 LiteralName - + Specifies the name of a member which you want to retrieve. Does NOT support wildcards. - + String String @@ -2339,9 +2530,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Name - + Specifies the name of a member which you want to retrieve. Supports wildcards. - + String String @@ -2351,9 +2542,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - + Specifies the SID of a member which you want to retrieve. - + SecurityIdentifier SecurityIdentifier @@ -2414,78 +2605,71 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 - New-GPPGroup - New - GPPGroup + Get-GPPUser + Get + GPPUser - Creates a new Group Policy Preferences group definition. + Retrieves a user from a given Group Policy Preferences instance. - Creates a new Group Policy Preferences group definition. You can either save it in the memory for additional processing or immediately put into a GPO by using the -GPOName or -GPOId parameters. - Note that available parameters depend on the action you choose: -Create, -Replace, -Update, or -Delete. This mimics the GUI behavior. + Retrieves a user from a given Group Policy Preferences instance. You can get that GPP object either from a GPO or you can pass one to the -GPPSection parameter (but that's mostly for module's internal stuff). - New-GPPGroup - - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Get-GPPUser + + BuiltInUser + + Allows you to search for user definitions of a system built-in user, instead of a regular account. + - Machine + Administrator + Guest - GPPContext + GPPItemUserSubAuthorityDisplay - GPPContext + GPPItemUserSubAuthorityDisplay None - Delete - - Sets the action property of the group definition to "Delete". - - - SwitchParameter - - - False - - - GPOId - - Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + GPPSection + + You can use this parameter to easily extract user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection - Guid + GPPSection None + + + Get-GPPUser - Name - - Specifies the name of the group. - - String + BuiltInUser + + Allows you to search for user definitions of a system built-in user, instead of a regular account. + + + Administrator + Guest + + GPPItemUserSubAuthorityDisplay - String + GPPItemUserSubAuthorityDisplay None - - - New-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -2497,48 +2681,41 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - Delete - - Sets the action property of the group definition to "Delete". - + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid - SwitchParameter - - - False - - - GPOName - - Specifies the name of a GPO into which you want to add the newly created group item. - - String - - String + Guid None + + + Get-GPPUser - Name - - Specifies the name of the group. - - String + BuiltInUser + + Allows you to search for user definitions of a system built-in user, instead of a regular account. + + + Administrator + Guest + + GPPItemUserSubAuthorityDisplay - String + GPPItemUserSubAuthorityDisplay None - - - New-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -2549,33 +2726,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - DeleteAllGroups - - Sets the DeleteAllGroups attribute at the group object. - - - SwitchParameter - - - False - - - DeleteAllUsers - - Sets the DeleteAllUsers attribute at the group object. - - - SwitchParameter - - - False - - - Description - - Sets the description of a group object. - + + GPOName + + Specifies the name of a GPO in which you want to search for users. + String String @@ -2583,22 +2738,29 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None + + + Get-GPPUser - Disable - - Disables processing of this group object. In the GUI you'll see it greyed out. - + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext - SwitchParameter + GPPContext - False + None GPOId - - Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + Guid Guid @@ -2606,23 +2768,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - Members - - Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - - GPPItemGroupMember[] - - GPPItemGroupMember[] - - - None - - + Name - - Specifies the name of the group. - + + Specifies the name of a group you want to retrieve. Supports wildcards. + String String @@ -2630,48 +2780,56 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None + + + Get-GPPUser - NewName - - Specifies the new name of the group if you want to rename it on target hosts. - - String + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext - String + GPPContext None - - PassThru - - Returns a new group object to the pipeline. - + + GPOName + + Specifies the name of a GPO in which you want to search for users. + + String - SwitchParameter + String - False + None - - Update - - Sets the action property of the group definition to "Update". - + + Name + + Specifies the name of a group you want to retrieve. Supports wildcards. + + String - SwitchParameter + String - False + None - New-GPPGroup + Get-GPPUser Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -2682,33 +2840,23 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - DeleteAllGroups - - Sets the DeleteAllGroups attribute at the group object. - - - SwitchParameter - - - False - - - DeleteAllUsers - - Sets the DeleteAllUsers attribute at the group object. - + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid - SwitchParameter + Guid - False + None - - Description - - Sets the description of a group object. - + + LiteralName + + Name of a user you want to retrieve. Does NOT support wildcards. + String String @@ -2716,22 +2864,29 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None + + + Get-GPPUser - Disable - - Disables processing of this group object. In the GUI you'll see it greyed out. - + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext - SwitchParameter + GPPContext - False + None GPOName - - Specifies the name of a GPO into which you want to add the newly created group item. - + + Specifies the name of a GPO in which you want to search for users. + String String @@ -2739,23 +2894,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - Members - - Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - - GPPItemGroupMember[] - - GPPItemGroupMember[] - - - None - - Name - - Specifies the name of the group. - + LiteralName + + Name of a user you want to retrieve. Does NOT support wildcards. + String String @@ -2763,48 +2906,56 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None + + + Get-GPPUser - NewName - - Specifies the new name of the group if you want to rename it on target hosts. - - String + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext - String + GPPContext None - - PassThru - - Returns a new group object to the pipeline. - + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid - SwitchParameter + Guid - False + None - Update - - Sets the action property of the group definition to "Update". - + UID + + Specifies the UID of a user definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property. + + Guid - SwitchParameter + Guid - False + None - New-GPPGroup + Get-GPPUser Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -2815,33 +2966,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - DeleteAllGroups - - Sets the DeleteAllGroups attribute at the group object. - - - SwitchParameter - - - False - - - DeleteAllUsers - - Sets the DeleteAllUsers attribute at the group object. - - - SwitchParameter - - - False - - - Description - - Sets the description of a group object. - + + GPOName + + Specifies the name of a GPO in which you want to search for users. + String String @@ -2849,22 +2978,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - Disable - - Disables processing of this group object. In the GUI you'll see it greyed out. - - - SwitchParameter - - - False - - GPOId - - Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + UID + + Specifies the UID of a user definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property. + Guid Guid @@ -2872,23 +2990,26 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - Members - - Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - - GPPItemGroupMember[] + + + Get-GPPUser + + GPPSection + + You can use this parameter to easily extract user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection - GPPItemGroupMember[] + GPPSection None - + Name - - Specifies the name of the group. - + + Specifies the name of a group you want to retrieve. Supports wildcards. + String String @@ -2896,37 +3017,232 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - PassThru - - Returns a new group object to the pipeline. - + + + Get-GPPUser + + GPPSection + + You can use this parameter to easily extract user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection - SwitchParameter + GPPSection - False + None - Replace - - Sets the action property of the group definition to "Replace". - + LiteralName + + Name of a user you want to retrieve. Does NOT support wildcards. + + String - SwitchParameter + String - False + None - New-GPPGroup - - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - + Get-GPPUser + + GPPSection + + You can use this parameter to easily extract user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection + + GPPSection + + + None + + + UID + + Specifies the UID of a user definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property. + + Guid + + Guid + + + None + + + + + + BuiltInUser + + Allows you to search for user definitions of a system built-in user, instead of a regular account. + + GPPItemUserSubAuthorityDisplay + + GPPItemUserSubAuthorityDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for users. + + String + + String + + + None + + + GPPSection + + You can use this parameter to easily extract user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection + + GPPSection + + + None + + + LiteralName + + Name of a user you want to retrieve. Does NOT support wildcards. + + String + + String + + + None + + + Name + + Specifies the name of a group you want to retrieve. Supports wildcards. + + String + + String + + + None + + + UID + + Specifies the UID of a user definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property. + + Guid + + Guid + + + None + + + + + + None + + + + + + + + + + GPPItemUser + + + + + + + + + + + + + + -------------------------- Example 1 -------------------------- + PS C:\> Get-GPPUser -Name 'TEST-*' -GPOName 'Custom Group Policy' + + Returns all user definitions where user name starts with "TEST-" from a GPO called "Custom Group Policy". + + + + -------------------------- Example 2 -------------------------- + PS C:\> Get-GPPUser -LiteralName 'TEST-*' -GPOId '70f86590-588a-4659-8880-3d2374604811' + + Returns all user definitions where user name is "TEST-*" from a GPO with an ID "70f86590-588a-4659-8880-3d2374604811". + + + + -------------------------- Example 3 -------------------------- + PS C:\> Get-GPPUser -UID '3B1BF433-38BF-47A5-925C-3DC32B6555B3' -GPOName 'Custom Group Policy' + + Returns a user definition with a UID "3B1BF433-38BF-47A5-925C-3DC32B6555B3" from a GPO called "Custom Group Policy". + + + + + + + + New-GPPGroup + New + GPPGroup + + Creates a new Group Policy Preferences group definition. + + + + Creates a new Group Policy Preferences group definition. You can either save it in the memory for additional processing or immediately put into a GPO by using the -GPOName or -GPOId parameters. + Note that available parameters depend on the action you choose: -Create, -Replace, -Update, or -Delete. This mimics the GUI behavior. + + + + New-GPPGroup + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + Machine GPPContext @@ -2936,33 +3252,34 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - DeleteAllGroups - - Sets the DeleteAllGroups attribute at the group object. - + + Delete + + Sets the action property of the group definition to "Delete". + SwitchParameter False - - DeleteAllUsers - - Sets the DeleteAllUsers attribute at the group object. - + + GPOId + + Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid - SwitchParameter + Guid - False + None - - Description - - Sets the description of a group object. - + + Name + + Specifies the name of a group. + String String @@ -2970,11 +3287,29 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None + + + New-GPPGroup - Disable - - Disables processing of this group object. In the GUI you'll see it greyed out. - + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + Delete + + Sets the action property of the group definition to "Delete". + SwitchParameter @@ -2983,9 +3318,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - - Specifies the name of a GPO into which you want to add the newly created group item. - + + Specifies the name of a GPO into which you want to add the newly created group definition. + String String @@ -2993,23 +3328,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - Members - - Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - - GPPItemGroupMember[] - - GPPItemGroupMember[] - - - None - Name - - Specifies the name of the group. - + + Specifies the name of a group. + String String @@ -3017,36 +3340,14 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - PassThru - - Returns a new group object to the pipeline. - - - SwitchParameter - - - False - - - Replace - - Sets the action property of the group definition to "Replace". - - - SwitchParameter - - - False - New-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -3057,22 +3358,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - Create - - Sets the action property of the group definition to "Create". - - - SwitchParameter - - - False - DeleteAllGroups - + Sets the DeleteAllGroups attribute at the group object. - + SwitchParameter @@ -3081,9 +3371,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllUsers - + Sets the DeleteAllUsers attribute at the group object. - + SwitchParameter @@ -3092,9 +3382,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Description - + Sets the description of a group object. - + String String @@ -3104,9 +3394,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter @@ -3115,9 +3405,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - - Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + + Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + Guid Guid @@ -3127,9 +3417,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -3139,9 +3429,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Name - - Specifies the name of the group. - + + Specifies the name of a group. + String String @@ -3150,24 +3440,47 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - PassThru - - Returns a new group object to the pipeline. - + NewName + + Specifies the new name of a group if you want to rename it on target hosts. + + String - SwitchParameter + String - False + None + + + PassThru + + Returns a new group definition object to the pipeline. + + + SwitchParameter + + + False + + + Update + + Sets the action property of the group definition to "Update". + + + SwitchParameter + + + False New-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -3178,22 +3491,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - Create - - Sets the action property of the group definition to "Create". - - - SwitchParameter - - - False - DeleteAllGroups - + Sets the DeleteAllGroups attribute at the group object. - + SwitchParameter @@ -3202,9 +3504,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllUsers - + Sets the DeleteAllUsers attribute at the group object. - + SwitchParameter @@ -3213,9 +3515,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Description - + Sets the description of a group object. - + String String @@ -3225,9 +3527,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter @@ -3236,9 +3538,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - - Specifies the name of a GPO into which you want to add the newly created group item. - + + Specifies the name of a GPO into which you want to add the newly created group definition. + String String @@ -3248,9 +3550,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -3260,9 +3562,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Name - - Specifies the name of the group. - + + Specifies the name of a group. + String String @@ -3271,39 +3573,22 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - PassThru - - Returns a new group object to the pipeline. - - - SwitchParameter - - - False - - - - New-GPPGroup - - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + NewName + + Specifies the new name of a group if you want to rename it on target hosts. + + String - GPPContext + String None - - Delete - - Sets the action property of the group definition to "Delete". - + + PassThru + + Returns a new group definition object to the pipeline. + SwitchParameter @@ -3311,90 +3596,24 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 False - GPOId - - Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid - - Guid - - - None - - - SID - - Specifies the SID of the group. - - SecurityIdentifier - - SecurityIdentifier - - - None - - - - New-GPPGroup - - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext - - GPPContext - - - None - - - Delete - - Sets the action property of the group definition to "Delete". - + Update + + Sets the action property of the group definition to "Update". + SwitchParameter False - - GPOName - - Specifies the name of a GPO into which you want to add the newly created group item. - - String - - String - - - None - - - SID - - Specifies the SID of the group. - - SecurityIdentifier - - SecurityIdentifier - - - None - New-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -3407,9 +3626,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllGroups - + Sets the DeleteAllGroups attribute at the group object. - + SwitchParameter @@ -3418,9 +3637,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllUsers - + Sets the DeleteAllUsers attribute at the group object. - + SwitchParameter @@ -3429,9 +3648,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Description - + Sets the description of a group object. - + String String @@ -3441,9 +3660,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter @@ -3452,9 +3671,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - - Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + + Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + Guid Guid @@ -3464,9 +3683,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -3474,11 +3693,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - NewName - - Specifies the new name of the group if you want to rename it on target hosts. - + + Name + + Specifies the name of a group. + String String @@ -3488,9 +3707,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 PassThru - - Returns a new group object to the pipeline. - + + Returns a new group definition object to the pipeline. + SwitchParameter @@ -3498,22 +3717,10 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 False - SID - - Specifies the SID of the group. - - SecurityIdentifier - - SecurityIdentifier - - - None - - - Update - - Sets the action property of the group definition to "Update". - + Replace + + Sets the action property of the group definition to "Replace". + SwitchParameter @@ -3525,9 +3732,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 New-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -3540,9 +3747,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllGroups - + Sets the DeleteAllGroups attribute at the group object. - + SwitchParameter @@ -3551,9 +3758,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllUsers - + Sets the DeleteAllUsers attribute at the group object. - + SwitchParameter @@ -3562,9 +3769,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Description - + Sets the description of a group object. - + String String @@ -3574,9 +3781,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter @@ -3585,9 +3792,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - - Specifies the name of a GPO into which you want to add the newly created group item. - + + Specifies the name of a GPO into which you want to add the newly created group definition. + String String @@ -3597,9 +3804,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -3607,11 +3814,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - NewName - - Specifies the new name of the group if you want to rename it on target hosts. - + + Name + + Specifies the name of a group. + String String @@ -3621,9 +3828,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 PassThru - - Returns a new group object to the pipeline. - + + Returns a new group definition object to the pipeline. + SwitchParameter @@ -3631,22 +3838,10 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 False - SID - - Specifies the SID of the group. - - SecurityIdentifier - - SecurityIdentifier - - - None - - - Update - - Sets the action property of the group definition to "Update". - + Replace + + Sets the action property of the group definition to "Replace". + SwitchParameter @@ -3658,9 +3853,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 New-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -3671,11 +3866,22 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None + + Create + + Sets the action property of the group definition to "Create". + + + SwitchParameter + + + False + DeleteAllGroups - + Sets the DeleteAllGroups attribute at the group object. - + SwitchParameter @@ -3684,9 +3890,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllUsers - + Sets the DeleteAllUsers attribute at the group object. - + SwitchParameter @@ -3695,9 +3901,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Description - + Sets the description of a group object. - + String String @@ -3707,9 +3913,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter @@ -3718,9 +3924,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - - Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + + Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + Guid Guid @@ -3730,9 +3936,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -3740,48 +3946,37 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - PassThru - - Returns a new group object to the pipeline. - + + Name + + Specifies the name of a group. + + String - SwitchParameter + String - False + None - - Replace - - Sets the action property of the group definition to "Replace". - + + PassThru + + Returns a new group definition object to the pipeline. + SwitchParameter False - - SID - - Specifies the SID of the group. - - SecurityIdentifier - - SecurityIdentifier - - - None - New-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -3792,11 +3987,22 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None + + Create + + Sets the action property of the group definition to "Create". + + + SwitchParameter + + + False + DeleteAllGroups - + Sets the DeleteAllGroups attribute at the group object. - + SwitchParameter @@ -3805,9 +4011,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllUsers - + Sets the DeleteAllUsers attribute at the group object. - + SwitchParameter @@ -3816,9 +4022,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Description - + Sets the description of a group object. - + String String @@ -3828,9 +4034,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter @@ -3839,9 +4045,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - - Specifies the name of a GPO into which you want to add the newly created group item. - + + Specifies the name of a GPO into which you want to add the newly created group definition. + String String @@ -3851,9 +4057,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -3861,33 +4067,75 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None + + Name + + Specifies the name of a group. + + String + + String + + + None + PassThru - - Returns a new group object to the pipeline. - + + Returns a new group definition object to the pipeline. + SwitchParameter False + + + New-GPPGroup + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + - Replace - - Sets the action property of the group definition to "Replace". - + Delete + + Sets the action property of the group definition to "Delete". + SwitchParameter False + + GPOId + + Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + SID - - Specifies the SID of the group. - + + Specifies the SID of a group. + SecurityIdentifier SecurityIdentifier @@ -3900,9 +4148,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 New-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -3914,55 +4162,97 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - Create - - Sets the action property of the group definition to "Create". - - - SwitchParameter - - - False - - - DeleteAllGroups - - Sets the DeleteAllGroups attribute at the group object. - + Delete + + Sets the action property of the group definition to "Delete". + SwitchParameter False - - DeleteAllUsers - - Sets the DeleteAllUsers attribute at the group object. - + + GPOName + + Specifies the name of a GPO into which you want to add the newly created group definition. + + String - SwitchParameter + String - False + None - - Description - - Sets the description of a group object. - - String + + SID + + Specifies the SID of a group. + + SecurityIdentifier - String + SecurityIdentifier None - + + + New-GPPGroup + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + DeleteAllGroups + + Sets the DeleteAllGroups attribute at the group object. + + + SwitchParameter + + + False + + + DeleteAllUsers + + Sets the DeleteAllUsers attribute at the group object. + + + SwitchParameter + + + False + + + Description + + Sets the description of a group object. + + String + + String + + + None + + Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter @@ -3971,9 +4261,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - - Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + + Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + Guid Guid @@ -3983,9 +4273,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -3993,11 +4283,23 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None + + NewName + + Specifies the new name of a group if you want to rename it on target hosts. + + String + + String + + + None + PassThru - - Returns a new group object to the pipeline. - + + Returns a new group definition object to the pipeline. + SwitchParameter @@ -4006,9 +4308,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - - Specifies the SID of the group. - + + Specifies the SID of a group. + SecurityIdentifier SecurityIdentifier @@ -4016,14 +4318,25 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None + + Update + + Sets the action property of the group definition to "Update". + + + SwitchParameter + + + False + New-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -4034,22 +4347,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - Create - - Sets the action property of the group definition to "Create". - - - SwitchParameter - - - False - DeleteAllGroups - + Sets the DeleteAllGroups attribute at the group object. - + SwitchParameter @@ -4058,9 +4360,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllUsers - + Sets the DeleteAllUsers attribute at the group object. - + SwitchParameter @@ -4069,9 +4371,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Description - + Sets the description of a group object. - + String String @@ -4081,9 +4383,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter @@ -4092,9 +4394,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - - Specifies the name of a GPO into which you want to add the newly created group item. - + + Specifies the name of a GPO into which you want to add the newly created group definition. + String String @@ -4104,9 +4406,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -4114,11 +4416,23 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None + + NewName + + Specifies the new name of a group if you want to rename it on target hosts. + + String + + String + + + None + PassThru - - Returns a new group object to the pipeline. - + + Returns a new group definition object to the pipeline. + SwitchParameter @@ -4127,9 +4441,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - - Specifies the SID of the group. - + + Specifies the SID of a group. + SecurityIdentifier SecurityIdentifier @@ -4137,25 +4451,40 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - - New-GPPGroup - Create - - Sets the action property of the group definition to "Create". - + Update + + Sets the action property of the group definition to "Update". + SwitchParameter False + + + New-GPPGroup + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + DeleteAllGroups - + Sets the DeleteAllGroups attribute at the group object. - + SwitchParameter @@ -4164,9 +4493,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllUsers - + Sets the DeleteAllUsers attribute at the group object. - + SwitchParameter @@ -4175,9 +4504,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Description - + Sets the description of a group object. - + String String @@ -4187,20 +4516,32 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter False + + GPOId + + Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -4208,48 +4549,63 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - Name - - Specifies the name of the group. - - String + + PassThru + + Returns a new group definition object to the pipeline. + - String + SwitchParameter - None + False - - PassThru - - Returns a new group object to the pipeline. - + + Replace + + Sets the action property of the group definition to "Replace". + SwitchParameter False + + SID + + Specifies the SID of a group. + + SecurityIdentifier + + SecurityIdentifier + + + None + New-GPPGroup - - Create - - Sets the action property of the group definition to "Create". - + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext - SwitchParameter + GPPContext - False + None DeleteAllGroups - + Sets the DeleteAllGroups attribute at the group object. - + SwitchParameter @@ -4258,9 +4614,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllUsers - + Sets the DeleteAllUsers attribute at the group object. - + SwitchParameter @@ -4269,9 +4625,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Description - + Sets the description of a group object. - + String String @@ -4281,20 +4637,32 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter False + + GPOName + + Specifies the name of a GPO into which you want to add the newly created group definition. + + String + + String + + + None + Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -4304,9 +4672,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 PassThru - - Returns a new group object to the pipeline. - + + Returns a new group definition object to the pipeline. + SwitchParameter @@ -4314,25 +4682,10 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 False - SID - - Specifies the SID of the group. - - SecurityIdentifier - - SecurityIdentifier - - - None - - - - New-GPPGroup - - Delete - - Sets the action property of the group definition to "Delete". - + Replace + + Sets the action property of the group definition to "Replace". + SwitchParameter @@ -4340,13 +4693,13 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 False - Name - - Specifies the name of the group. - - String + SID + + Specifies the SID of a group. + + SecurityIdentifier - String + SecurityIdentifier None @@ -4354,37 +4707,37 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 New-GPPGroup - - Delete - - Sets the action property of the group definition to "Delete". - + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext - SwitchParameter + GPPContext - False + None - SID - - Specifies the SID of the group. - - SecurityIdentifier + Create + + Sets the action property of the group definition to "Create". + - SecurityIdentifier + SwitchParameter - None + False - - - New-GPPGroup DeleteAllGroups - + Sets the DeleteAllGroups attribute at the group object. - + SwitchParameter @@ -4393,9 +4746,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllUsers - + Sets the DeleteAllUsers attribute at the group object. - + SwitchParameter @@ -4404,9 +4757,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Description - + Sets the description of a group object. - + String String @@ -4416,20 +4769,32 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter False + + GPOId + + Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -4437,60 +4802,63 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - Name - - Specifies the name of the group. - - String + + PassThru + + Returns a new group definition object to the pipeline. + - String + SwitchParameter - None + False - - NewName - - Specifies the new name of the group if you want to rename it on target hosts. - - String + + SID + + Specifies the SID of a group. + + SecurityIdentifier - String + SecurityIdentifier None + + + New-GPPGroup - PassThru - - Returns a new group object to the pipeline. - + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext - SwitchParameter + GPPContext - False + None - Update - - Sets the action property of the group definition to "Update". - + Create + + Sets the action property of the group definition to "Create". + SwitchParameter False - - - New-GPPGroup DeleteAllGroups - + Sets the DeleteAllGroups attribute at the group object. - + SwitchParameter @@ -4499,9 +4867,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllUsers - + Sets the DeleteAllUsers attribute at the group object. - + SwitchParameter @@ -4510,9 +4878,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Description - + Sets the description of a group object. - + String String @@ -4522,20 +4890,32 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter False - + + GPOName + + Specifies the name of a GPO into which you want to add the newly created group definition. + + String + + String + + + None + + Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -4543,11 +4923,70 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None + + PassThru + + Returns a new group definition object to the pipeline. + + + SwitchParameter + + + False + + + SID + + Specifies the SID of a group. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + New-GPPGroup - Name - - Specifies the name of the group. - + Create + + Sets the action property of the group definition to "Create". + + + SwitchParameter + + + False + + + DeleteAllGroups + + Sets the DeleteAllGroups attribute at the group object. + + + SwitchParameter + + + False + + + DeleteAllUsers + + Sets the DeleteAllUsers attribute at the group object. + + + SwitchParameter + + + False + + + Description + + Sets the description of a group object. + String String @@ -4556,21 +4995,45 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - PassThru - - Returns a new group object to the pipeline. - + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + SwitchParameter False + + Members + + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. + + GPPItemGroupMember[] + + GPPItemGroupMember[] + + + None + - Replace - - Sets the action property of the group definition to "Replace". - + Name + + Specifies the name of a group. + + String + + String + + + None + + + PassThru + + Returns a new group definition object to the pipeline. + SwitchParameter @@ -4580,11 +5043,22 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 New-GPPGroup + + Create + + Sets the action property of the group definition to "Create". + + + SwitchParameter + + + False + DeleteAllGroups - + Sets the DeleteAllGroups attribute at the group object. - + SwitchParameter @@ -4593,9 +5067,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllUsers - + Sets the DeleteAllUsers attribute at the group object. - + SwitchParameter @@ -4604,9 +5078,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Description - + Sets the description of a group object. - + String String @@ -4616,9 +5090,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter @@ -4627,9 +5101,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -4638,10 +5112,47 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - NewName - - Specifies the new name of the group if you want to rename it on target hosts. - + PassThru + + Returns a new group definition object to the pipeline. + + + SwitchParameter + + + False + + + SID + + Specifies the SID of a group. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + New-GPPGroup + + Delete + + Sets the action property of the group definition to "Delete". + + + SwitchParameter + + + False + + + Name + + Specifies the name of a group. + String String @@ -4649,11 +5160,14 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None - - PassThru - - Returns a new group object to the pipeline. - + + + New-GPPGroup + + Delete + + Sets the action property of the group definition to "Delete". + SwitchParameter @@ -4662,9 +5176,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - - Specifies the SID of the group. - + + Specifies the SID of a group. + SecurityIdentifier SecurityIdentifier @@ -4672,11 +5186,106 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None + + + New-GPPGroup + + DeleteAllGroups + + Sets the DeleteAllGroups attribute at the group object. + + + SwitchParameter + + + False + + + DeleteAllUsers + + Sets the DeleteAllUsers attribute at the group object. + + + SwitchParameter + + + False + + + Description + + Sets the description of a group object. + + String + + String + + + None + + + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + + + SwitchParameter + + + False + + + Members + + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. + + GPPItemGroupMember[] + + GPPItemGroupMember[] + + + None + + + Name + + Specifies the name of a group. + + String + + String + + + None + + + NewName + + Specifies the new name of a group if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new group definition object to the pipeline. + + + SwitchParameter + + + False + Update - + Sets the action property of the group definition to "Update". - + SwitchParameter @@ -4688,9 +5297,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 New-GPPGroup DeleteAllGroups - + Sets the DeleteAllGroups attribute at the group object. - + SwitchParameter @@ -4699,9 +5308,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllUsers - + Sets the DeleteAllUsers attribute at the group object. - + SwitchParameter @@ -4710,9 +5319,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Description - + Sets the description of a group object. - + String String @@ -4722,9 +5331,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter @@ -4733,9 +5342,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -4743,11 +5352,23 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 None + + Name + + Specifies the name of a group. + + String + + String + + + None + PassThru - - Returns a new group object to the pipeline. - + + Returns a new group definition object to the pipeline. + SwitchParameter @@ -4756,36 +5377,224 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Replace - + Sets the action property of the group definition to "Replace". - + SwitchParameter False - - SID - - Specifies the SID of the group. - - SecurityIdentifier + + + New-GPPGroup + + DeleteAllGroups + + Sets the DeleteAllGroups attribute at the group object. + - SecurityIdentifier + SwitchParameter + + + False + + + DeleteAllUsers + + Sets the DeleteAllUsers attribute at the group object. + + + SwitchParameter + + + False + + + Description + + Sets the description of a group object. + + String + + String None - - - - - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - GPPContext + + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + + + SwitchParameter + + + False + + + Members + + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. + + GPPItemGroupMember[] + + GPPItemGroupMember[] + + + None + + + NewName + + Specifies the new name of a group if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new group definition object to the pipeline. + + + SwitchParameter + + + False + + + SID + + Specifies the SID of a group. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + Update + + Sets the action property of the group definition to "Update". + + + SwitchParameter + + + False + + + + New-GPPGroup + + DeleteAllGroups + + Sets the DeleteAllGroups attribute at the group object. + + + SwitchParameter + + + False + + + DeleteAllUsers + + Sets the DeleteAllUsers attribute at the group object. + + + SwitchParameter + + + False + + + Description + + Sets the description of a group object. + + String + + String + + + None + + + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + + + SwitchParameter + + + False + + + Members + + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. + + GPPItemGroupMember[] + + GPPItemGroupMember[] + + + None + + + PassThru + + Returns a new group definition object to the pipeline. + + + SwitchParameter + + + False + + + Replace + + Sets the action property of the group definition to "Replace". + + + SwitchParameter + + + False + + + SID + + Specifies the SID of a group. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + GPPContext GPPContext @@ -4794,9 +5603,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Create - + Sets the action property of the group definition to "Create". - + SwitchParameter SwitchParameter @@ -4806,9 +5615,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Delete - + Sets the action property of the group definition to "Delete". - + SwitchParameter SwitchParameter @@ -4818,9 +5627,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllGroups - + Sets the DeleteAllGroups attribute at the group object. - + SwitchParameter SwitchParameter @@ -4830,9 +5639,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 DeleteAllUsers - + Sets the DeleteAllUsers attribute at the group object. - + SwitchParameter SwitchParameter @@ -4842,9 +5651,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Description - + Sets the description of a group object. - + String String @@ -4854,9 +5663,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter SwitchParameter @@ -4866,9 +5675,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOId - - Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + + Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + Guid Guid @@ -4878,9 +5687,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 GPOName - - Specifies the name of a GPO into which you want to add the newly created group item. - + + Specifies the name of a GPO into which you want to add the newly created group definition. + String String @@ -4890,9 +5699,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Members - + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - + GPPItemGroupMember[] GPPItemGroupMember[] @@ -4902,9 +5711,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Name - - Specifies the name of the group. - + + Specifies the name of a group. + String String @@ -4914,9 +5723,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 NewName - - Specifies the new name of the group if you want to rename it on target hosts. - + + Specifies the new name of a group if you want to rename it on target hosts. + String String @@ -4926,9 +5735,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 PassThru - - Returns a new group object to the pipeline. - + + Returns a new group definition object to the pipeline. + SwitchParameter SwitchParameter @@ -4938,9 +5747,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Replace - + Sets the action property of the group definition to "Replace". - + SwitchParameter SwitchParameter @@ -4950,9 +5759,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 SID - - Specifies the SID of the group. - + + Specifies the SID of a group. + SecurityIdentifier SecurityIdentifier @@ -4962,9 +5771,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5 Update - + Sets the action property of the group definition to "Update". - + SwitchParameter SwitchParameter @@ -5011,7 +5820,7 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M -------------------------- Example 2 -------------------------- PS C:\> New-GPPGroup -Name 'TEST-1' -GPOId '70f86590-588a-4659-8880-3d2374604811' -Delete - Creates a new group definition for a group called "TEST-1" with its action set to "Delete", and saved it in a GPO with ID 70f86590-588a-4659-8880-3d2374604811. + Creates a new group definition for a group called "TEST-1" with its action set to "Delete", and saves it in a GPO with ID 70f86590-588a-4659-8880-3d2374604811. @@ -5048,9 +5857,9 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M New-GPPGroupMember Action - + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - + ADD REMOVE @@ -5064,9 +5873,9 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M Name - + Specifies the name of a security principal. - + String String @@ -5079,9 +5888,9 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M New-GPPGroupMember Action - + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - + ADD REMOVE @@ -5095,9 +5904,9 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M SID - + Specifies the SID of a security principal. - + SecurityIdentifier SecurityIdentifier @@ -5110,9 +5919,9 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M Action - + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - + GPPItemGroupMemberAction GPPItemGroupMemberAction @@ -5122,9 +5931,9 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M Name - + Specifies the name of a security principal. - + String String @@ -5134,9 +5943,9 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M SID - + Specifies the SID of a security principal. - + SecurityIdentifier SecurityIdentifier @@ -5190,66 +5999,48 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M - Remove-GPPGroup - Remove - GPPGroup + New-GPPUser + New + GPPUser - Removes a group definition from a GPO object. + Creates a new Group Policy Preferences user definition. - Removes a group definition from a GPO object. + Creates a new Group Policy Preferences user definition. You can either save it in the memory for additional processing or immediately put into a GPO by using the -GPOName or -GPOId parameters. + Note that available parameters depend on the action you choose: -Update or -Delete. This mimics the GUI behavior. - Remove-GPPGroup + New-GPPUser - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext - - GPPContext - - - None - - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + AccountDisabled + + Specifies that the target user account must be disabled. + - Guid + SwitchParameter - None + False - - Name - - Specifies the name of a group you want to remove from a GPO. - - String + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime - String + DateTime None - - - Remove-GPPGroup Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -5260,11 +6051,11 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M None - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - + + Description + + Sets the description of a user object. + String String @@ -5272,41 +6063,34 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M None - - Name - - Specifies the name of a group you want to remove from a GPO. - - String + + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + - String + SwitchParameter - None + False - - - Remove-GPPGroup - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + FullName + + Specifies a full name for the target account. + + String - GPPContext + String None GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + + Specifies the ID of a GPO into which you want to add the newly created user definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + Guid Guid @@ -5315,67 +6099,93 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M None - SID - - Specifies the SID of a group you want to remove from a GPO. - - SecurityIdentifier + Name + + Specifies the name of a user. + + String - SecurityIdentifier + String None - - - Remove-GPPGroup - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + NewName + + Specifies the new name of a user if you want to rename it on target hosts. + + String - GPPContext + String None + + PassThru + + Returns a new user definition object to the pipeline. + + + SwitchParameter + + + False + - GPOName - - Specifies the name of a GPO in which you want to search for groups. - - String + Update + + Sets the action property of the user definition to "Update". + - String + SwitchParameter - None + False - SID - - Specifies the SID of a group you want to remove from a GPO. - - SecurityIdentifier + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + - SecurityIdentifier + SwitchParameter - None + False - Remove-GPPGroup + New-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + + SwitchParameter + + + False + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -5386,53 +6196,46 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M None - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + + Description + + Sets the description of a user object. + + String - Guid + String None - - UID - - Specifies the UID of a group you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - - Guid + + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + - Guid + SwitchParameter - None + False - - - Remove-GPPGroup - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + FullName + + Specifies a full name for the target account. + + String - GPPContext + String None GPOName - - Specifies the name of a GPO in which you want to search for groups. - + + Specifies the name of a GPO into which you want to add the newly created group definition. + String String @@ -5441,37 +6244,128 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M None - UID - - Specifies the UID of a group you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - - Guid + Name + + Specifies the name of a user. + + String - Guid + String + + + None + + + NewName + + Specifies the new name of a user if you want to rename it on target hosts. + + String + + String None + + PassThru + + Returns a new user definition object to the pipeline. + + + SwitchParameter + + + False + + + Update + + Sets the action property of the user definition to "Update". + + + SwitchParameter + + + False + + + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + + + SwitchParameter + + + False + - Remove-GPPGroup - - GPPSection - - You can use this parameter to easily remove group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. - - GPPSection + New-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + - GPPSection + SwitchParameter + + + False + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + + Description + + Sets the description of a user object. + + String + + String + + + None + + + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + + + SwitchParameter + + + False + + + FullName + + Specifies a full name for the target account. + + String + + String None Name - - Specifies the name of a group you want to remove from a GPO. - + + Specifies the name of a user. + String String @@ -5479,53 +6373,121 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M None - - - Remove-GPPGroup - - GPPSection - - You can use this parameter to easily remove group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. - - GPPSection + + NewName + + Specifies the new name of a user if you want to rename it on target hosts. + + String - GPPSection + String None - SID - - Specifies the SID of a group you want to remove from a GPO. - - SecurityIdentifier + Update + + Sets the action property of the user definition to "Update". + - SecurityIdentifier + SwitchParameter - None + False + + + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + + + SwitchParameter + + + False - Remove-GPPGroup - - GPPSection - - You can use this parameter to easily remove group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. - - GPPSection + New-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + - GPPSection + SwitchParameter + + + False + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + Description + + Sets the description of a user object. + + String + + String + + + None + + + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + + + SwitchParameter + + + False + + + FullName + + Specifies a full name for the target account. + + String + + String None - UID - - Specifies the UID of a group you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - + GPOId + + Specifies the ID of a GPO into which you want to add the newly created user definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + Guid Guid @@ -5533,266 +6495,105 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M None - - - - - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - GPPContext - - GPPContext - - - None - - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid - - Guid - - - None - - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - - String - - String - - - None - - - GPPSection - - You can use this parameter to easily remove group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. - - GPPSection - - GPPSection - - - None - - - Name - - Specifies the name of a group you want to remove from a GPO. - - String - - String - - - None - - - SID - - Specifies the SID of a group you want to remove from a GPO. - - SecurityIdentifier - - SecurityIdentifier - - - None - - - UID - - Specifies the UID of a group you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - - Guid - - Guid - - - None - - - - - - None - - - - - - - - - - System.Void - - - - - - - - - - - - - - -------------------------- Example 1 -------------------------- - PS C:\> Remove-GPPGroup -Name 'TEST-*' -GPOName 'Custom Group Policy' - - Removes all groups named "TEST-*" from the "Custom Group Policy" GPO. The -Name parameter does not support wildcards. - - - - -------------------------- Example 2 -------------------------- - PS C:\> $Groups = Get-GPPGroup -Name 'TEST-*' -GPOName 'Custom Group Policy' -PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Policy' } - - Removes all groups which name starts with "TEST-" from the "Custom Group Policy" GPO. - - - - - - - - Remove-GPPGroupMember - Remove - GPPGroupMember - - Removes a member from a group defined in a Group Policy object. - - - - Removes a member from a group defined in a Group Policy object. This doesn't necessary remove that member from computers to which the GPO applies - it depends on the group's and member's configuration. - - - - Remove-GPPGroupMember - - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + + Name + + Specifies the name of a user. + + String - GPPContext + String None - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + + NewName + + Specifies the new name of a user if you want to rename it on target hosts. + + String - Guid + String None - - GroupUID - - Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - - Guid + + PassThru + + Returns a new user definition object to the pipeline. + - Guid + SwitchParameter - None + False - - Name - - Specifies the name of a member which you want to remove. - - String + + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + - String + SwitchParameter - None + False - - - Remove-GPPGroupMember - - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + + Update + + Sets the action property of the user definition to "Update". + - GPPContext + SwitchParameter - None + False - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + - Guid + SwitchParameter - None + False - - GroupSID - - Specifies the SID of a group from which you want to remove a member. - - SecurityIdentifier + + + New-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + - SecurityIdentifier + SwitchParameter - None + False - - Name - - Specifies the name of a member which you want to remove. - - String + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime - String + DateTime None - - - Remove-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -5803,23 +6604,46 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli None - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + + Description + + Sets the description of a user object. + + String - Guid + String + + + None + + + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + + + SwitchParameter + + + False + + + FullName + + Specifies a full name for the target account. + + String + + String None - GroupName - - Specifies the name of a group from which you want to remove a member. - + GPOName + + Specifies the name of a GPO into which you want to add the newly created group definition. + String String @@ -5829,9 +6653,9 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli Name - - Specifies the name of a member which you want to remove. - + + Specifies the name of a user. + String String @@ -5839,149 +6663,140 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli None - - - Remove-GPPGroupMember - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + NewName + + Specifies the new name of a user if you want to rename it on target hosts. + + String - GPPContext + String None - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + + PassThru + + Returns a new user definition object to the pipeline. + - Guid + SwitchParameter - None + False - - GroupUID - - Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - - Guid + + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + - Guid + SwitchParameter - None + False - SID - - Specifies the SID of a member which you want to remove. - - SecurityIdentifier + Update + + Sets the action property of the user definition to "Update". + - SecurityIdentifier + SwitchParameter - None + False + + + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + + + SwitchParameter + + + False - Remove-GPPGroupMember + New-GPPUser - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + AccountDisabled + + Specifies that the target user account must be disabled. + - GPPContext + SwitchParameter - None + False - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime - Guid + DateTime None - - GroupSID - - Specifies the SID of a group from which you want to remove a member. - - SecurityIdentifier + + Description + + Sets the description of a user object. + + String - SecurityIdentifier + String None - - SID - - Specifies the SID of a member which you want to remove. - - SecurityIdentifier + + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + - SecurityIdentifier + SwitchParameter - None + False - - - Remove-GPPGroupMember - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + FullName + + Specifies a full name for the target account. + + String - GPPContext + String None - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + Name + + Specifies the name of a user. + + String - Guid + String None - - GroupName - - Specifies the name of a group from which you want to remove a member. - + + NewName + + Specifies the new name of a user if you want to rename it on target hosts. + String String @@ -5989,80 +6804,86 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli None + + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + + + SwitchParameter + + + False + - SID - - Specifies the SID of a member which you want to remove. - - SecurityIdentifier + Update + + Sets the action property of the user definition to "Update". + - SecurityIdentifier + SwitchParameter - None + False - - - Remove-GPPGroupMember - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + - GPPContext + SwitchParameter - None + False - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - - String + + + New-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + - String + SwitchParameter - None + False - - GroupUID - - Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - - Guid + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime - Guid + DateTime None - Name - - Specifies the name of a member which you want to remove. - - String + BuiltInUser + + Allows you to target your user definition to a system built-in user, instead of a regular account. + + + Administrator + Guest + + GPPItemUserSubAuthorityDisplay - String + GPPItemUserSubAuthorityDisplay None - - - Remove-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -6073,11 +6894,11 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli None - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - + + Description + + Sets the description of a user object. + String String @@ -6085,23 +6906,22 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli None - - GroupSID - - Specifies the SID of a group from which you want to remove a member. - - SecurityIdentifier + + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + - SecurityIdentifier + SwitchParameter - None + False - - Name - - Specifies the name of a member which you want to remove. - + + FullName + + Specifies a full name for the target account. + String String @@ -6109,29 +6929,23 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli None - - - Remove-GPPGroupMember - - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + + GPOId + + Specifies the ID of a GPO into which you want to add the newly created user definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid - GPPContext + Guid None - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - + + NewName + + Specifies the new name of a user if you want to rename it on target hosts. + String String @@ -6139,92 +6953,86 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli None - - GroupName - - Specifies the name of a group from which you want to remove a member. - - String + + PassThru + + Returns a new user definition object to the pipeline. + - String + SwitchParameter - None + False - Name - - Specifies the name of a member which you want to remove. - - String + Update + + Sets the action property of the user definition to "Update". + - String + SwitchParameter - None + False - - - Remove-GPPGroupMember - - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + - GPPContext + SwitchParameter - None + False - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - - String + + + New-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + - String + SwitchParameter - None + False - - GroupUID - - Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - - Guid + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime - Guid + DateTime None - SID - - Specifies the SID of a member which you want to remove. - - SecurityIdentifier + BuiltInUser + + Allows you to target your user definition to a system built-in user, instead of a regular account. + + + Administrator + Guest + + GPPItemUserSubAuthorityDisplay - SecurityIdentifier + GPPItemUserSubAuthorityDisplay None - - - Remove-GPPGroupMember Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -6235,11 +7043,11 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli None - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - + + Description + + Sets the description of a user object. + String String @@ -6247,293 +7055,145 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli None - - GroupSID - - Specifies the SID of a group from which you want to remove a member. - - SecurityIdentifier + + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + - SecurityIdentifier + SwitchParameter + + + False + + + FullName + + Specifies a full name for the target account. + + String + + String None - SID - - Specifies the SID of a member which you want to remove. - - SecurityIdentifier + GPOName + + Specifies the name of a GPO into which you want to add the newly created group definition. + + String - SecurityIdentifier + String None - - - Remove-GPPGroupMember - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + NewName + + Specifies the new name of a user if you want to rename it on target hosts. + + String - GPPContext + String None - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - - String + + PassThru + + Returns a new user definition object to the pipeline. + - String + SwitchParameter - None + False - GroupName - - Specifies the name of a group from which you want to remove a member. - - String + Update + + Sets the action property of the user definition to "Update". + - String + SwitchParameter - None + False - SID - - Specifies the SID of a member which you want to remove. - - SecurityIdentifier + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + - SecurityIdentifier + SwitchParameter - None + False - - - - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - GPPContext - - GPPContext - - - None - - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid - - Guid - - - None - - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - - String - - String - - - None - - - GroupName - - Specifies the name of a group from which you want to remove a member. - - String - - String - - - None - - - GroupSID - - Specifies the SID of a group from which you want to remove a member. - - SecurityIdentifier - - SecurityIdentifier - - - None - - - GroupUID - - Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - - Guid - - Guid - - - None - - - Name - - Specifies the name of a member which you want to remove. - - String - - String - - - None - - - SID - - Specifies the SID of a member which you want to remove. - - SecurityIdentifier - - SecurityIdentifier - - - None - - - - - - None - - - - - - - - - - System.Void - - - - - - - - - - - - - - -------------------------- Example 1 -------------------------- - PS C:\> Remove-GPPGroupMember -Name 'EXAMPLE\TEST-*' -GroupName 'TEST' -GPOName 'Custom Group Policy' - - Removes all groups named "TEST-*" from group "TEST" defined in the "Custom Group Policy" GPO. The -Name parameter does not support wildcards. - - - - -------------------------- Example 2 -------------------------- - PS C:\> $Members = Get-GPPGroupMember -Name 'EXAMPLE\TEST-*' -GPOName 'Custom Group Policy' -PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2' -GPOName 'Custom Group Policy' } - - Removes all groups which name starts with "EXAMPLE\TEST-" from a group with SID "S-1-5-2" defined in the "Custom Group Policy" GPO. - - - - - - - - Set-GPPGroup - Set - GPPGroup - - Sets properties of a GPP group object in a specified Group Policy object. - - - - Sets properties of a GPP group object in a specified Group Policy object. You may also use it to write a GPP group object from memory into a GPO and changing some of its properties in the process. If you want just to add a group into a GPO, w/o any modifications, I suggest you to use Add-GPPGroup. - - - Set-GPPGroup + New-GPPUser - Action - - Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. - For properties compatibility see help for New-GPPGroup. - - - Create - Replace - Update - Delete - - GPPItemActionDisplay + AccountDisabled + + Specifies that the target user account must be disabled. + - GPPItemActionDisplay + SwitchParameter - None + False - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + + BuiltInUser + + Allows you to target your user definition to a system built-in user, instead of a regular account. + - Machine + Administrator + Guest - GPPContext + GPPItemUserSubAuthorityDisplay - GPPContext + GPPItemUserSubAuthorityDisplay None - DeleteAllGroups - - Sets the DeleteAllGroups attribute at the group object. - + Description + + Sets the description of a user object. + + String - SwitchParameter + String - False + None - DeleteAllUsers - - Sets the DeleteAllUsers attribute at the group object. - + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + SwitchParameter @@ -6541,10 +7201,10 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 False - Description - - Sets the description of a group object. - + FullName + + Specifies a full name for the target account. + String String @@ -6553,102 +7213,86 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 None - Disable - - Disables processing of this group object. In the GUI you'll see it greyed out. - + NewName + + Specifies the new name of a user if you want to rename it on target hosts. + + String - SwitchParameter + String - False + None - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + Update + + Sets the action property of the user definition to "Update". + - Guid + SwitchParameter - None + False - InputObject - - If you already have a GPP group object in memory, which you want to write into a Group Policy, you can pass in into this parameter. - - GPPItemGroup + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + - GPPItemGroup + SwitchParameter - None + False + + + New-GPPUser - Members - - Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - - GPPItemGroupMember[] + AccountDisabled + + Specifies that the target user account must be disabled. + - GPPItemGroupMember[] + SwitchParameter - None + False - NewName - - Specifies the new name of a group if you want to rename it on target hosts. - - String + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime - String + DateTime None - - PassThru - - Returns a new group object to the pipeline. - + + BuiltInUser + + Allows you to target your user definition to a system built-in user, instead of a regular account. + + + Administrator + Guest + + GPPItemUserSubAuthorityDisplay - SwitchParameter + GPPItemUserSubAuthorityDisplay - False - - - - Set-GPPGroup - - Action - - Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. - For properties compatibility see help for New-GPPGroup. - - - Create - Replace - Update - Delete - - GPPItemActionDisplay - - GPPItemActionDisplay - - - None + None Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -6660,21 +7304,22 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 None - DeleteAllGroups - - Sets the DeleteAllGroups attribute at the group object. - + Description + + Sets the description of a user object. + + String - SwitchParameter + String - False + None - DeleteAllUsers - - Sets the DeleteAllUsers attribute at the group object. - + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + SwitchParameter @@ -6682,10 +7327,10 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 False - Description - - Sets the description of a group object. - + FullName + + Specifies a full name for the target account. + String String @@ -6693,22 +7338,11 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 None - - Disable - - Disables processing of this group object. In the GUI you'll see it greyed out. - - - SwitchParameter - - - False - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + + Specifies the ID of a GPO into which you want to add the newly created user definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + Guid Guid @@ -6717,46 +7351,55 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 None - Members - - Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - - GPPItemGroupMember[] + NewName + + Specifies the new name of a user if you want to rename it on target hosts. + + String - GPPItemGroupMember[] + String None - - Name - - Specifies the name of a group which you want to change. - - String + + PassThru + + Returns a new user definition object to the pipeline. + - String + SwitchParameter - None + False - NewName - - Specifies the new name of a group if you want to rename it on target hosts. - - String + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + - String + SwitchParameter - None + False + + + Update + + Sets the action property of the user definition to "Update". + + + SwitchParameter + + + False - PassThru - - Returns a new group object to the pipeline. - + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + SwitchParameter @@ -6765,31 +7408,51 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 - Set-GPPGroup + New-GPPUser - Action - - Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. - For properties compatibility see help for New-GPPGroup. - + AccountDisabled + + Specifies that the target user account must be disabled. + + + SwitchParameter + + + False + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + + BuiltInUser + + Allows you to target your user definition to a system built-in user, instead of a regular account. + - Create - Replace - Update - Delete + Administrator + Guest - GPPItemActionDisplay + GPPItemUserSubAuthorityDisplay - GPPItemActionDisplay + GPPItemUserSubAuthorityDisplay None Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -6800,33 +7463,11 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 None - - DeleteAllGroups - - Sets the DeleteAllGroups attribute at the group object. - - - SwitchParameter - - - False - - - DeleteAllUsers - - Sets the DeleteAllUsers attribute at the group object. - - - SwitchParameter - - - False - Description - - Sets the description of a group object. - + + Sets the description of a user object. + String String @@ -6836,44 +7477,44 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter False - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + + FullName + + Specifies a full name for the target account. + + String - Guid + String None - - Members - - Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - - GPPItemGroupMember[] + + GPOName + + Specifies the name of a GPO into which you want to add the newly created group definition. + + String - GPPItemGroupMember[] + String None NewName - - Specifies the new name of a group if you want to rename it on target hosts. - + + Specifies the new name of a user if you want to rename it on target hosts. + String String @@ -6883,69 +7524,56 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 PassThru - - Returns a new group object to the pipeline. - + + Returns a new user definition object to the pipeline. + SwitchParameter False - - SID - - Specifies the SID of a group which you want to change. - - SecurityIdentifier + + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + - SecurityIdentifier + SwitchParameter - None + False - - - Set-GPPGroup - - Action - - Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. - For properties compatibility see help for New-GPPGroup. - - - Create - Replace - Update - Delete - - GPPItemActionDisplay + + Update + + Sets the action property of the user definition to "Update". + - GPPItemActionDisplay + SwitchParameter - None + False - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + - GPPContext + SwitchParameter - None + False + + + New-GPPUser - DeleteAllGroups - - Sets the DeleteAllGroups attribute at the group object. - + AccountDisabled + + Specifies that the target user account must be disabled. + SwitchParameter @@ -6953,21 +7581,38 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 False - DeleteAllUsers - - Sets the DeleteAllUsers attribute at the group object. - + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime - SwitchParameter + DateTime - False + None + + + BuiltInUser + + Allows you to target your user definition to a system built-in user, instead of a regular account. + + + Administrator + Guest + + GPPItemUserSubAuthorityDisplay + + GPPItemUserSubAuthorityDisplay + + + None Description - - Sets the description of a group object. - + + Sets the description of a user object. + String String @@ -6977,20 +7622,20 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter False - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - + + FullName + + Specifies a full name for the target account. + String String @@ -6998,47 +7643,45 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 None - - InputObject - - If you already have a GPP group object in memory, which you want to write into a Group Policy, you can pass in into this parameter. - - GPPItemGroup + + NewName + + Specifies the new name of a user if you want to rename it on target hosts. + + String - GPPItemGroup + String None - Members - - Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - - GPPItemGroupMember[] + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + - GPPItemGroupMember[] + SwitchParameter - None + False - - NewName - - Specifies the new name of a group if you want to rename it on target hosts. - - String + + Update + + Sets the action property of the user definition to "Update". + - String + SwitchParameter - None + False - PassThru - - Returns a new group object to the pipeline. - + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + SwitchParameter @@ -7047,31 +7690,12 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 - Set-GPPGroup - - Action - - Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. - For properties compatibility see help for New-GPPGroup. - - - Create - Replace - Update - Delete - - GPPItemActionDisplay - - GPPItemActionDisplay - - - None - + New-GPPUser Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -7082,11 +7706,11 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 None - - DeleteAllGroups - - Sets the DeleteAllGroups attribute at the group object. - + + Delete + + Sets the action property of the user definition to "Delete". + SwitchParameter @@ -7094,33 +7718,10 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 False - DeleteAllUsers - - Sets the DeleteAllUsers attribute at the group object. - - - SwitchParameter - - - False - - - Description - - Sets the description of a group object. - - String - - String - - - None - - - Disable - - Disables processing of this group object. In the GUI you'll see it greyed out. - + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + SwitchParameter @@ -7128,46 +7729,22 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 False - GPOName - - Specifies the name of a GPO in which you want to search for groups. - - String - - String - - - None - - - Members - - Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - - GPPItemGroupMember[] + GPOId + + Specifies the ID of a GPO into which you want to add the newly created user definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid - GPPItemGroupMember[] + Guid None Name - - Specifies the name of a group which you want to change. - - String - - String - - - None - - - NewName - - Specifies the new name of a group if you want to rename it on target hosts. - + + Specifies the name of a user. + String String @@ -7177,9 +7754,9 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 PassThru - - Returns a new group object to the pipeline. - + + Returns a new user definition object to the pipeline. + SwitchParameter @@ -7188,31 +7765,12 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 - Set-GPPGroup - - Action - - Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. - For properties compatibility see help for New-GPPGroup. - - - Create - Replace - Update - Delete - - GPPItemActionDisplay - - GPPItemActionDisplay - - - None - + New-GPPUser Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -7223,11 +7781,11 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 None - - DeleteAllGroups - - Sets the DeleteAllGroups attribute at the group object. - + + Delete + + Sets the action property of the user definition to "Delete". + SwitchParameter @@ -7235,21 +7793,21 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 False - DeleteAllUsers - - Sets the DeleteAllUsers attribute at the group object. - + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + SwitchParameter False - - Description - - Sets the description of a group object. - + + GPOName + + Specifies the name of a GPO into which you want to add the newly created group definition. + String String @@ -7257,22 +7815,11 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 None - - Disable - - Disables processing of this group object. In the GUI you'll see it greyed out. - - - SwitchParameter - - - False - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - + Name + + Specifies the name of a user. + String String @@ -7281,34 +7828,35 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 None - Members - - Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - - GPPItemGroupMember[] + PassThru + + Returns a new user definition object to the pipeline. + - GPPItemGroupMember[] + SwitchParameter - None + False - - NewName - - Specifies the new name of a group if you want to rename it on target hosts. - - String + + + New-GPPUser + + Delete + + Sets the action property of the user definition to "Delete". + - String + SwitchParameter - None + False - PassThru - - Returns a new group object to the pipeline. - + Disable + + Disables processing of this group object. In the GUI you'll see it greyed out. + SwitchParameter @@ -7316,13 +7864,13 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 False - SID - - Specifies the SID of a group which you want to change. - - SecurityIdentifier + Name + + Specifies the name of a user. + + String - SecurityIdentifier + String None @@ -7331,47 +7879,58 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 - Action - - Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. - For properties compatibility see help for New-GPPGroup. - - GPPItemActionDisplay + AccountDisabled + + Specifies that the target user account must be disabled. + + SwitchParameter - GPPItemActionDisplay + SwitchParameter - None + False - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - GPPContext + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime - GPPContext + DateTime None - - DeleteAllGroups - - Sets the DeleteAllGroups attribute at the group object. - - SwitchParameter + + BuiltInUser + + Allows you to target your user definition to a system built-in user, instead of a regular account. + + GPPItemUserSubAuthorityDisplay - SwitchParameter + GPPItemUserSubAuthorityDisplay - False + None - DeleteAllUsers - - Sets the DeleteAllUsers attribute at the group object. - + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + GPPContext + + GPPContext + + + None + + + Delete + + Sets the action property of the user definition to "Delete". + SwitchParameter SwitchParameter @@ -7381,9 +7940,9 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 Description - - Sets the description of a group object. - + + Sets the description of a user object. + String String @@ -7393,9 +7952,9 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 Disable - + Disables processing of this group object. In the GUI you'll see it greyed out. - + SwitchParameter SwitchParameter @@ -7403,11 +7962,23 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 False + + FullName + + Specifies a full name for the target account. + + String + + String + + + None + GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + + Specifies the ID of a GPO into which you want to add the newly created user definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + Guid Guid @@ -7417,9 +7988,9 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 GPOName - - Specifies the name of a GPO in which you want to search for groups. - + + Specifies the name of a GPO into which you want to add the newly created group definition. + String String @@ -7428,58 +7999,70 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 None - InputObject - - If you already have a GPP group object in memory, which you want to write into a Group Policy, you can pass in into this parameter. - - GPPItemGroup + Name + + Specifies the name of a user. + + String - GPPItemGroup + String None - Members - - Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. - - GPPItemGroupMember[] + NewName + + Specifies the new name of a user if you want to rename it on target hosts. + + String - GPPItemGroupMember[] + String None - - Name - - Specifies the name of a group which you want to change. - - String + + PassThru + + Returns a new user definition object to the pipeline. + + SwitchParameter - String + SwitchParameter - None + False - NewName - - Specifies the new name of a group if you want to rename it on target hosts. - - String + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + + SwitchParameter - String + SwitchParameter - None + False + + + Update + + Sets the action property of the user definition to "Update". + + SwitchParameter + + SwitchParameter + + + False - PassThru - - Returns a new group object to the pipeline. - + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + SwitchParameter SwitchParameter @@ -7488,16 +8071,16 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 False - SID - - Specifies the SID of a group which you want to change. - - SecurityIdentifier + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + + SwitchParameter - SecurityIdentifier + SwitchParameter - None + False @@ -7513,7 +8096,7 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 - GPPItemGroup + GPPItemUser @@ -7528,31 +8111,30 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2 -------------------------- Example 1 -------------------------- - PS C:\> Set-GPPGroup -SID 'S-1-5-32-544' -GPOName 'Custom Group Policy' -Action Update -Members $Members + PS C:\> New-GPPUser -Name 'TEST-1' -GPOName 'Custom Group Policy' -Update -NewName 'TEST2' - Changes the action of the group definition of a group with SID "S-1-5-32-544" in the GPO "Custom Group Policy" to "Update" and sets it members to the value of the $Members variable. + Creates a new user definition for a user called "TEST-1" in a GPO called "Custom Group Policy". The definition will rename this user on target computers to "TEST2" -------------------------- Example 2 -------------------------- - PS C:\> Set-GPPGroup -Name 'EXAMPLE\Test-Group' -GPOName 'Custom Group Policy' -Action Delete + PS C:\> New-GPPUser -Name 'TEST-1' -GPOId '70f86590-588a-4659-8880-3d2374604811' -Delete - Changes the action of the group definition of a group called "EXAMPLE\Test-Group" in the GPO "Custom Group Policy" to "Delete". + Creates a new group definition for a user called "TEST-1" with its action set to "Delete", and saves it in a GPO with ID 70f86590-588a-4659-8880-3d2374604811. -------------------------- Example 3 -------------------------- - PS C:\> $Group = Get-GPPGroup -Name 'EXAMPLE\Test-Group' -GPOName 'Custom Group Policy' -PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -DeleteAllGroups -DeleteAllUsers + PS C:\> $UserDef = New-GPPUser -BuiltInUser Administrator -Update -PasswordNeverExpires - Updates the definition of the "EXAMPLE\Test-Group" group in the "Custom Group Policy" GPO to delete all group and users from that group except for those explicitly defined in the group definition. + Creates a new user definition in the current PowerShell session for a built-in user "Administrator". This object defines that "Administrator"'s will never expire. Note that this group definition is not saved in any group policy object - it exists only in memory. You can modify it and later save in a GPO using Add-GPPUser. -------------------------- Example 4 -------------------------- - PS C:\> Set-GPPGroup -Name 'EXAMPLE\Test-Group' -GPOName 'Custom Group Policy' -Disable + PS C:\> New-GPPUser -Name 'TEST-1' -Update -GPOName 'Custom Group Policy' -AccountExpires ((Get-Date).AddMonths(1)) -UserMustChangePassword - Disables the group definition for a group called "EXAMPLE\Test-Group" in the "Custom Group Policy" GPO. + Creates a new user definition in a GPO named "Custom Group Policy". The definition specifies that all users named "TEST-1" on target computers should expire in a month. @@ -7560,40 +8142,5905 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele - Set-GPPGroupMember - Set - GPPGroupMember - - Sets properties of a group member defined in a Group Policy object. + Remove-GPPGroup + Remove + GPPGroup + + Removes a group definition from a GPO object. - Sets properties of a group member defined in a Group Policy object. Well, actually the only property you can change is "Action" - there's just not much to set. + Removes a group definition from a GPO object. - Set-GPPGroupMember - + Remove-GPPGroup + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + Name + + Specifies the name of a group you want to remove from a GPO. + + String + + String + + + None + + + + Remove-GPPGroup + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + Name + + Specifies the name of a group you want to remove from a GPO. + + String + + String + + + None + + + + Remove-GPPGroup + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + LiteralName + + Specifies the name of a group you want to remove from a GPO. Does NOT support wildcards. + + String + + String + + + None + + + + Remove-GPPGroup + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + LiteralName + + Specifies the name of a group you want to remove from a GPO. Does NOT support wildcards. + + String + + String + + + None + + + + Remove-GPPGroup + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + SID + + Specifies the SID of a group you want to remove from a GPO. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + Remove-GPPGroup + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + SID + + Specifies the SID of a group you want to remove from a GPO. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + Remove-GPPGroup + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + UID + + Specifies the UID of a group definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property. + + Guid + + Guid + + + None + + + + Remove-GPPGroup + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + UID + + Specifies the UID of a group definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property. + + Guid + + Guid + + + None + + + + Remove-GPPGroup + + GPPSection + + You can use this parameter to easily remove group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection + + GPPSection + + + None + + + Name + + Specifies the name of a group you want to remove from a GPO. + + String + + String + + + None + + + + Remove-GPPGroup + + GPPSection + + You can use this parameter to easily remove group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection + + GPPSection + + + None + + + LiteralName + + Specifies the name of a group you want to remove from a GPO. Does NOT support wildcards. + + String + + String + + + None + + + + Remove-GPPGroup + + GPPSection + + You can use this parameter to easily remove group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection + + GPPSection + + + None + + + SID + + Specifies the SID of a group you want to remove from a GPO. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + Remove-GPPGroup + + GPPSection + + You can use this parameter to easily remove group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection + + GPPSection + + + None + + + UID + + Specifies the UID of a group definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property. + + Guid + + Guid + + + None + + + + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GPPSection + + You can use this parameter to easily remove group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection + + GPPSection + + + None + + + Name + + Specifies the name of a group you want to remove from a GPO. + + String + + String + + + None + + + SID + + Specifies the SID of a group you want to remove from a GPO. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + UID + + Specifies the UID of a group definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property. + + Guid + + Guid + + + None + + + LiteralName + + Specifies the name of a group you want to remove from a GPO. Does NOT support wildcards. + + String + + String + + + None + + + + + + None + + + + + + + + + + System.Void + + + + + + + + + + + + + + -------------------------- Example 1 -------------------------- + PS C:\> Remove-GPPGroup -Name 'TEST-*' -GPOName 'Custom Group Policy' + + Removes all group definitions where group names start with "TEST-*" from the "Custom Group Policy" GPO. + + + + + + + + Remove-GPPGroupMember + Remove + GPPGroupMember + + Removes a member from a group defined in a Group Policy object. + + + + Removes a member from a group defined in a Group Policy object. This doesn't necessary remove that member from computers to which the GPO applies - it depends on the group's and member's configuration. + + + + Remove-GPPGroupMember + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GroupUID + + Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. + + Guid + + Guid + + + None + + + Name + + Specifies the name of a member which you want to remove. + + String + + String + + + None + + + + Remove-GPPGroupMember + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GroupSID + + Specifies the SID of a group from which you want to remove a member. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + Name + + Specifies the name of a member which you want to remove. + + String + + String + + + None + + + + Remove-GPPGroupMember + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GroupName + + Specifies the name of a group from which you want to remove a member. + + String + + String + + + None + + + Name + + Specifies the name of a member which you want to remove. + + String + + String + + + None + + + + Remove-GPPGroupMember + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GroupUID + + Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. + + Guid + + Guid + + + None + + + SID + + Specifies the SID of a member which you want to remove. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + Remove-GPPGroupMember + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GroupSID + + Specifies the SID of a group from which you want to remove a member. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + SID + + Specifies the SID of a member which you want to remove. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + Remove-GPPGroupMember + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GroupName + + Specifies the name of a group from which you want to remove a member. + + String + + String + + + None + + + SID + + Specifies the SID of a member which you want to remove. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + Remove-GPPGroupMember + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GroupUID + + Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. + + Guid + + Guid + + + None + + + Name + + Specifies the name of a member which you want to remove. + + String + + String + + + None + + + + Remove-GPPGroupMember + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GroupSID + + Specifies the SID of a group from which you want to remove a member. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + Name + + Specifies the name of a member which you want to remove. + + String + + String + + + None + + + + Remove-GPPGroupMember + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GroupName + + Specifies the name of a group from which you want to remove a member. + + String + + String + + + None + + + Name + + Specifies the name of a member which you want to remove. + + String + + String + + + None + + + + Remove-GPPGroupMember + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GroupUID + + Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. + + Guid + + Guid + + + None + + + SID + + Specifies the SID of a member which you want to remove. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + Remove-GPPGroupMember + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GroupSID + + Specifies the SID of a group from which you want to remove a member. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + SID + + Specifies the SID of a member which you want to remove. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + Remove-GPPGroupMember + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GroupName + + Specifies the name of a group from which you want to remove a member. + + String + + String + + + None + + + SID + + Specifies the SID of a member which you want to remove. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GroupName + + Specifies the name of a group from which you want to remove a member. + + String + + String + + + None + + + GroupSID + + Specifies the SID of a group from which you want to remove a member. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + GroupUID + + Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. + + Guid + + Guid + + + None + + + Name + + Specifies the name of a member which you want to remove. + + String + + String + + + None + + + SID + + Specifies the SID of a member which you want to remove. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + + + None + + + + + + + + + + System.Void + + + + + + + + + + + + + + -------------------------- Example 1 -------------------------- + PS C:\> Remove-GPPGroupMember -Name 'EXAMPLE\TEST-*' -GroupName 'TEST' -GPOName 'Custom Group Policy' + + Removes all groups named "TEST-*" from group "TEST" defined in the "Custom Group Policy" GPO. The -Name parameter does not support wildcards. + + + + -------------------------- Example 2 -------------------------- + PS C:\> $Members = Get-GPPGroupMember -Name 'EXAMPLE\TEST-*' -GPOName 'Custom Group Policy' +PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2' -GPOName 'Custom Group Policy' } + + Removes all groups which name starts with "EXAMPLE\TEST-" from a group with SID "S-1-5-2" defined in the "Custom Group Policy" GPO. + + + + + + + + Remove-GPPUser + Remove + GPPUser + + Removes a user definition from a GPO object. + + + + Removes a user definition from a GPO object. + + + + Remove-GPPUser + + BuiltInUser + + Allows you to search for user definitions of a system built-in user, instead of a regular account. + + + RID_ADMIN + RID_GUEST + + GPPItemUserSubAuthority + + GPPItemUserSubAuthority + + + None + + + GPPSection + + You can use this parameter to easily remove user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection + + GPPSection + + + None + + + + Remove-GPPUser + + BuiltInUser + + Allows you to search for user definitions of a system built-in user, instead of a regular account. + + + RID_ADMIN + RID_GUEST + + GPPItemUserSubAuthority + + GPPItemUserSubAuthority + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + + Remove-GPPUser + + BuiltInUser + + Allows you to search for user definitions of a system built-in user, instead of a regular account. + + + RID_ADMIN + RID_GUEST + + GPPItemUserSubAuthority + + GPPItemUserSubAuthority + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for users. + + String + + String + + + None + + + + Remove-GPPUser + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + Name + + Specifies the name of a user you want to remove from a GPO. + + String + + String + + + None + + + + Remove-GPPUser + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for users. + + String + + String + + + None + + + Name + + Specifies the name of a user you want to remove from a GPO. + + String + + String + + + None + + + + Remove-GPPUser + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + LiteralName + + Specifies the name of a user you want to remove from a GPO. Does NOT support wildcards. + + String + + String + + + None + + + + Remove-GPPUser + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for users. + + String + + String + + + None + + + LiteralName + + Specifies the name of a user you want to remove from a GPO. Does NOT support wildcards. + + String + + String + + + None + + + + Remove-GPPUser + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + UID + + Specifies the UID of a user definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property. + + Guid + + Guid + + + None + + + + Remove-GPPUser + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for users. + + String + + String + + + None + + + UID + + Specifies the UID of a user definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property. + + Guid + + Guid + + + None + + + + Remove-GPPUser + + GPPSection + + You can use this parameter to easily remove user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection + + GPPSection + + + None + + + Name + + Specifies the name of a user you want to remove from a GPO. + + String + + String + + + None + + + + Remove-GPPUser + + GPPSection + + You can use this parameter to easily remove user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection + + GPPSection + + + None + + + LiteralName + + Specifies the name of a user you want to remove from a GPO. Does NOT support wildcards. + + String + + String + + + None + + + + Remove-GPPUser + + GPPSection + + You can use this parameter to easily remove user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection + + GPPSection + + + None + + + UID + + Specifies the UID of a user definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property. + + Guid + + Guid + + + None + + + + + + BuiltInUser + + Allows you to search for user definitions of a system built-in user, instead of a regular account. + + GPPItemUserSubAuthority + + GPPItemUserSubAuthority + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for users. + + String + + String + + + None + + + GPPSection + + You can use this parameter to easily remove user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls. + + GPPSection + + GPPSection + + + None + + + LiteralName + + Specifies the name of a user you want to remove from a GPO. Does NOT support wildcards. + + String + + String + + + None + + + Name + + Specifies the name of a user you want to remove from a GPO. + + String + + String + + + None + + + UID + + Specifies the UID of a user definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property. + + Guid + + Guid + + + None + + + + + + None + + + + + + + + + + System.Void + + + + + + + + + + + + + + -------------------------- Example 1 -------------------------- + PS C:\> Remove-GPPUser -Name 'TEST-*' -GPOName 'Custom Group Policy' + + Removes all user definitions where user names start with "TEST-*" from the "Custom Group Policy" GPO. + + + + + + + + Set-GPPGroup + Set + GPPGroup + + Sets properties of a group definition in a specified Group Policy object. + + + + Sets properties of a group definition in a specified Group Policy object. You may also use it to write a group definition object from memory into a GPO and changing some of its properties in the process. If you want just to add a group definition into a GPO, w/o any modifications, I suggest you to use Add-GPPGroup. + + + + Set-GPPGroup + + Action + + Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. + For properties compatibility see help for New-GPPGroup. + + + Create + Replace + Update + Delete + + GPPItemActionDisplay + + GPPItemActionDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + DeleteAllGroups + + Sets the DeleteAllGroups attribute at the group object. + + + SwitchParameter + + + False + + + DeleteAllUsers + + Sets the DeleteAllUsers attribute at the group object. + + + SwitchParameter + + + False + + + Description + + Sets the description of a group object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + + SwitchParameter + + + False + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + InputObject + + If you already have a group definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter. + + GPPItemGroup + + GPPItemGroup + + + None + + + Members + + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. + + GPPItemGroupMember[] + + GPPItemGroupMember[] + + + None + + + NewName + + Specifies a new name for a group if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new group definition object to the pipeline. + + + SwitchParameter + + + False + + + + Set-GPPGroup + + Action + + Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. + For properties compatibility see help for New-GPPGroup. + + + Create + Replace + Update + Delete + + GPPItemActionDisplay + + GPPItemActionDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + DeleteAllGroups + + Sets the DeleteAllGroups attribute at the group object. + + + SwitchParameter + + + False + + + DeleteAllUsers + + Sets the DeleteAllUsers attribute at the group object. + + + SwitchParameter + + + False + + + Description + + Sets the description of a group object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + + SwitchParameter + + + False + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + Members + + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. + + GPPItemGroupMember[] + + GPPItemGroupMember[] + + + None + + + Name + + Specifies the name of a group which you want to change. Supports wildcards. + + String + + String + + + None + + + NewName + + Specifies a new name for a group if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new group definition object to the pipeline. + + + SwitchParameter + + + False + + + + Set-GPPGroup + + Action + + Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. + For properties compatibility see help for New-GPPGroup. + + + Create + Replace + Update + Delete + + GPPItemActionDisplay + + GPPItemActionDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + DeleteAllGroups + + Sets the DeleteAllGroups attribute at the group object. + + + SwitchParameter + + + False + + + DeleteAllUsers + + Sets the DeleteAllUsers attribute at the group object. + + + SwitchParameter + + + False + + + Description + + Sets the description of a group object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + + SwitchParameter + + + False + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + Members + + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. + + GPPItemGroupMember[] + + GPPItemGroupMember[] + + + None + + + NewName + + Specifies a new name for a group if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new group definition object to the pipeline. + + + SwitchParameter + + + False + + + LiteralName + + Specifies the name of a group which you want to change. Does not support wildcards. + + String + + String + + + None + + + + Set-GPPGroup + + Action + + Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. + For properties compatibility see help for New-GPPGroup. + + + Create + Replace + Update + Delete + + GPPItemActionDisplay + + GPPItemActionDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + DeleteAllGroups + + Sets the DeleteAllGroups attribute at the group object. + + + SwitchParameter + + + False + + + DeleteAllUsers + + Sets the DeleteAllUsers attribute at the group object. + + + SwitchParameter + + + False + + + Description + + Sets the description of a group object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + + SwitchParameter + + + False + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + Members + + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. + + GPPItemGroupMember[] + + GPPItemGroupMember[] + + + None + + + NewName + + Specifies a new name for a group if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new group definition object to the pipeline. + + + SwitchParameter + + + False + + + SID + + Specifies the SID of a group which you want to change. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + Set-GPPGroup + + Action + + Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. + For properties compatibility see help for New-GPPGroup. + + + Create + Replace + Update + Delete + + GPPItemActionDisplay + + GPPItemActionDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + DeleteAllGroups + + Sets the DeleteAllGroups attribute at the group object. + + + SwitchParameter + + + False + + + DeleteAllUsers + + Sets the DeleteAllUsers attribute at the group object. + + + SwitchParameter + + + False + + + Description + + Sets the description of a group object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + + SwitchParameter + + + False + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + InputObject + + If you already have a group definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter. + + GPPItemGroup + + GPPItemGroup + + + None + + + Members + + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. + + GPPItemGroupMember[] + + GPPItemGroupMember[] + + + None + + + NewName + + Specifies a new name for a group if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new group definition object to the pipeline. + + + SwitchParameter + + + False + + + + Set-GPPGroup + + Action + + Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. + For properties compatibility see help for New-GPPGroup. + + + Create + Replace + Update + Delete + + GPPItemActionDisplay + + GPPItemActionDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + DeleteAllGroups + + Sets the DeleteAllGroups attribute at the group object. + + + SwitchParameter + + + False + + + DeleteAllUsers + + Sets the DeleteAllUsers attribute at the group object. + + + SwitchParameter + + + False + + + Description + + Sets the description of a group object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + + SwitchParameter + + + False + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + Members + + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. + + GPPItemGroupMember[] + + GPPItemGroupMember[] + + + None + + + Name + + Specifies the name of a group which you want to change. Supports wildcards. + + String + + String + + + None + + + NewName + + Specifies a new name for a group if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new group definition object to the pipeline. + + + SwitchParameter + + + False + + + + Set-GPPGroup + + Action + + Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. + For properties compatibility see help for New-GPPGroup. + + + Create + Replace + Update + Delete + + GPPItemActionDisplay + + GPPItemActionDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + DeleteAllGroups + + Sets the DeleteAllGroups attribute at the group object. + + + SwitchParameter + + + False + + + DeleteAllUsers + + Sets the DeleteAllUsers attribute at the group object. + + + SwitchParameter + + + False + + + Description + + Sets the description of a group object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + + SwitchParameter + + + False + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + Members + + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. + + GPPItemGroupMember[] + + GPPItemGroupMember[] + + + None + + + NewName + + Specifies a new name for a group if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new group definition object to the pipeline. + + + SwitchParameter + + + False + + + LiteralName + + Specifies the name of a group which you want to change. Does not support wildcards. + + String + + String + + + None + + + + Set-GPPGroup + + Action + + Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. + For properties compatibility see help for New-GPPGroup. + + + Create + Replace + Update + Delete + + GPPItemActionDisplay + + GPPItemActionDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + DeleteAllGroups + + Sets the DeleteAllGroups attribute at the group object. + + + SwitchParameter + + + False + + + DeleteAllUsers + + Sets the DeleteAllUsers attribute at the group object. + + + SwitchParameter + + + False + + + Description + + Sets the description of a group object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + + SwitchParameter + + + False + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + Members + + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. + + GPPItemGroupMember[] + + GPPItemGroupMember[] + + + None + + + NewName + + Specifies a new name for a group if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new group definition object to the pipeline. + + + SwitchParameter + + + False + + + SID + + Specifies the SID of a group which you want to change. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + + + Action + + Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well. + For properties compatibility see help for New-GPPGroup. + + GPPItemActionDisplay + + GPPItemActionDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + GPPContext + + GPPContext + + + None + + + DeleteAllGroups + + Sets the DeleteAllGroups attribute at the group object. + + SwitchParameter + + SwitchParameter + + + False + + + DeleteAllUsers + + Sets the DeleteAllUsers attribute at the group object. + + SwitchParameter + + SwitchParameter + + + False + + + Description + + Sets the description of a group object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + SwitchParameter + + SwitchParameter + + + False + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + InputObject + + If you already have a group definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter. + + GPPItemGroup + + GPPItemGroup + + + None + + + Members + + Specifies which group members should be set for this group. Use New-GPPGroupMember to create them. + + GPPItemGroupMember[] + + GPPItemGroupMember[] + + + None + + + Name + + Specifies the name of a group which you want to change. Supports wildcards. + + String + + String + + + None + + + NewName + + Specifies a new name for a group if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new group definition object to the pipeline. + + SwitchParameter + + SwitchParameter + + + False + + + SID + + Specifies the SID of a group which you want to change. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + LiteralName + + Specifies the name of a group which you want to change. Does not support wildcards. + + String + + String + + + None + + + + + + None + + + + + + + + + + GPPItemGroup + + + + + + + + + + + + + + -------------------------- Example 1 -------------------------- + PS C:\> Set-GPPGroup -SID 'S-1-5-32-544' -GPOName 'Custom Group Policy' -Action Update -Members $Members + + Changes the action of the group definition of a group with SID "S-1-5-32-544" in the GPO "Custom Group Policy" to "Update" and sets it members to the value of the $Members variable. + + + + -------------------------- Example 2 -------------------------- + PS C:\> Set-GPPGroup -Name 'EXAMPLE\Test-Group' -GPOName 'Custom Group Policy' -Action Delete + + Changes the action of the group definition of a group called "EXAMPLE\Test-Group" in the GPO "Custom Group Policy" to "Delete". + + + + -------------------------- Example 3 -------------------------- + PS C:\> $Group = Get-GPPGroup -Name 'EXAMPLE\Test-Group' -GPOName 'Custom Group Policy' +PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -DeleteAllGroups -DeleteAllUsers + + Updates the definition of the "EXAMPLE\Test-Group" group in the "Custom Group Policy" GPO to delete all group and users from that group except for those explicitly defined in the group definition. + + + + -------------------------- Example 4 -------------------------- + PS C:\> Set-GPPGroup -Name 'EXAMPLE\Test-Group' -GPOName 'Custom Group Policy' -Disable + + Disables the group definition for a group called "EXAMPLE\Test-Group" in the "Custom Group Policy" GPO. + + + + + + + + Set-GPPGroupMember + Set + GPPGroupMember + + Sets properties of a group member defined in a Group Policy object. + + + + Sets properties of a group member defined in a Group Policy object. Well, actually the only property you can change is "Action" - there's just not much to set. + + + + Set-GPPGroupMember + + Action + + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. + + + ADD + REMOVE + + GPPItemGroupMemberAction + + GPPItemGroupMemberAction + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GroupUID + + Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. + + Guid + + Guid + + + None + + + Name + + Specifies the name of a member which you want to change. + + String + + String + + + None + + + + Set-GPPGroupMember + + Action + + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. + + + ADD + REMOVE + + GPPItemGroupMemberAction + + GPPItemGroupMemberAction + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GroupSID + + Specifies the SID of a group in which you want to change a member. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + Name + + Specifies the name of a member which you want to change. + + String + + String + + + None + + + + Set-GPPGroupMember + + Action + + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. + + + ADD + REMOVE + + GPPItemGroupMemberAction + + GPPItemGroupMemberAction + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GroupName + + Specifies the name of a group in which you want to change a member. + + String + + String + + + None + + + Name + + Specifies the name of a member which you want to change. + + String + + String + + + None + + + + Set-GPPGroupMember + + Action + + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. + + + ADD + REMOVE + + GPPItemGroupMemberAction + + GPPItemGroupMemberAction + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GroupUID + + Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. + + Guid + + Guid + + + None + + + SID + + Specifies the SID of a member which you want to change. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + Set-GPPGroupMember + + Action + + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. + + + ADD + REMOVE + + GPPItemGroupMemberAction + + GPPItemGroupMemberAction + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GroupSID + + Specifies the SID of a group in which you want to change a member. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + SID + + Specifies the SID of a member which you want to change. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + Set-GPPGroupMember + + Action + + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. + + + ADD + REMOVE + + GPPItemGroupMemberAction + + GPPItemGroupMemberAction + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GroupName + + Specifies the name of a group in which you want to change a member. + + String + + String + + + None + + + SID + + Specifies the SID of a member which you want to change. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + Set-GPPGroupMember + + Action + + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. + + + ADD + REMOVE + + GPPItemGroupMemberAction + + GPPItemGroupMemberAction + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GroupUID + + Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. + + Guid + + Guid + + + None + + + Name + + Specifies the name of a member which you want to change. + + String + + String + + + None + + + + Set-GPPGroupMember + + Action + + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. + + + ADD + REMOVE + + GPPItemGroupMemberAction + + GPPItemGroupMemberAction + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GroupSID + + Specifies the SID of a group in which you want to change a member. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + Name + + Specifies the name of a member which you want to change. + + String + + String + + + None + + + + Set-GPPGroupMember + + Action + + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. + + + ADD + REMOVE + + GPPItemGroupMemberAction + + GPPItemGroupMemberAction + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GroupName + + Specifies the name of a group in which you want to change a member. + + String + + String + + + None + + + Name + + Specifies the name of a member which you want to change. + + String + + String + + + None + + + + Set-GPPGroupMember + + Action + + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. + + + ADD + REMOVE + + GPPItemGroupMemberAction + + GPPItemGroupMemberAction + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GroupUID + + Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. + + Guid + + Guid + + + None + + + SID + + Specifies the SID of a member which you want to change. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + Set-GPPGroupMember + + Action + + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. + + + ADD + REMOVE + + GPPItemGroupMemberAction + + GPPItemGroupMemberAction + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GroupSID + + Specifies the SID of a group in which you want to change a member. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + SID + + Specifies the SID of a member which you want to change. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + Set-GPPGroupMember + + Action + + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. + + + ADD + REMOVE + + GPPItemGroupMemberAction + + GPPItemGroupMemberAction + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GroupName + + Specifies the name of a group in which you want to change a member. + + String + + String + + + None + + + SID + + Specifies the SID of a member which you want to change. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + + + Action + + Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. + + GPPItemGroupMemberAction + + GPPItemGroupMemberAction + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + GPPContext + + GPPContext + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for groups. + + String + + String + + + None + + + GroupName + + Specifies the name of a group in which you want to change a member. + + String + + String + + + None + + + GroupSID + + Specifies the SID of a group in which you want to change a member. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + GroupUID + + Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. + + Guid + + Guid + + + None + + + Name + + Specifies the name of a member which you want to change. + + String + + String + + + None + + + SID + + Specifies the SID of a member which you want to change. + + SecurityIdentifier + + SecurityIdentifier + + + None + + + + + + None + + + + + + + + + + System.Void + + + + + + + + + + + + + + -------------------------- Example 1 -------------------------- + PS C:\> Set-GPPGroupMember -Name 'EXAMPLE\Administrator' -Action ADD -GroupName 'Administrators (built-in)' -GPOName 'Custom Group Policy' + + Sets the action to ADD for the "EXAMPLE\Administrator" user in the "Administrators (built-in)" group in a group policy named "Custom Group Policy". + + + + -------------------------- Example 2 -------------------------- + PS C:\> Set-GPPGroupMember -Name 'EXAMPLE\Administrator' -Action REMOVE -GroupSID 'S-1-5-32-544' -GPOName 'Custom Group Policy' + + Sets the action to REMOVE for the "EXAMPLE\Administrator" user in a group with the SID S-1-5-32-544 a group policy named "Custom Group Policy". + + + + + + + + Set-GPPUser + Set + GPPUser + + Sets properties of a user definition in a specified Group Policy object. + + + + Sets properties of a user definition in a specified Group Policy object. You may also use it to write a user definition object from memory into a GPO and changing some of its properties in the process. If you want just to add a user definition into a GPO, w/o any modifications, I suggest you to use Add-GPPUser. + + + + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + + Action + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + + + Update + Delete + + GPPItemUserActionDisplay + + GPPItemUserActionDisplay + + + None + + + BuiltInUser + + Allows you to target your user definition to a system built-in user, instead of a regular account. + + + Administrator + Guest + + GPPItemUserSubAuthorityDisplay + + GPPItemUserSubAuthorityDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + Description + + Sets the description of a user object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean + + Boolean + + + None + + + FullName + + Specifies a full name for the target account. + + String + + String + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new user definition object to the pipeline. + + + SwitchParameter + + + False + + + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + + Boolean + + Boolean + + + None + + + + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + + Action + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + + + Update + Delete + + GPPItemUserActionDisplay + + GPPItemUserActionDisplay + + + None + + + BuiltInUser + + Allows you to target your user definition to a system built-in user, instead of a regular account. + + + Administrator + Guest + + GPPItemUserSubAuthorityDisplay + + GPPItemUserSubAuthorityDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + Description + + Sets the description of a user object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean + + Boolean + + + None + + + FullName + + Specifies a full name for the target account. + + String + + String + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for users. + + String + + String + + + None + + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new user definition object to the pipeline. + + + SwitchParameter + + + False + + + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + + Boolean + + Boolean + + + None + + + + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + + Action + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + + + Update + Delete + + GPPItemUserActionDisplay + + GPPItemUserActionDisplay + + + None + + + BuiltInUser + + Allows you to target your user definition to a system built-in user, instead of a regular account. + + + Administrator + Guest + + GPPItemUserSubAuthorityDisplay + + GPPItemUserSubAuthorityDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + Description + + Sets the description of a user object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean + + Boolean + + + None + + + FullName + + Specifies a full name for the target account. + + String + + String + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new user definition object to the pipeline. + + + SwitchParameter + + + False + + + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + + Boolean + + Boolean + + + None + + + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + + Boolean + + Boolean + + + None + + + + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + + Action + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + + + Update + Delete + + GPPItemUserActionDisplay + + GPPItemUserActionDisplay + + + None + + + BuiltInUser + + Allows you to target your user definition to a system built-in user, instead of a regular account. + + + Administrator + Guest + + GPPItemUserSubAuthorityDisplay + + GPPItemUserSubAuthorityDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + Description + + Sets the description of a user object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean + + Boolean + + + None + + + FullName + + Specifies a full name for the target account. + + String + + String + + + None + + + GPOName + + Specifies the name of a GPO in which you want to search for users. + + String + + String + + + None + + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new user definition object to the pipeline. + + + SwitchParameter + + + False + + + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + + Boolean + + Boolean + + + None + + + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + + Boolean + + Boolean + + + None + + + + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + + Action + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + + + Update + Delete + + GPPItemUserActionDisplay + + GPPItemUserActionDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + Description + + Sets the description of a user object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean + + Boolean + + + None + + + FullName + + Specifies a full name for the target account. + + String + + String + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + InputObject + + If you already have a user definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter. + + GPPItemUser + + GPPItemUser + + + None + + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new user definition object to the pipeline. + + + SwitchParameter + + + False + + + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + + Boolean + + Boolean + + + None + + + + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + + Action + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + + + Update + Delete + + GPPItemUserActionDisplay + + GPPItemUserActionDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + Description + + Sets the description of a user object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean + + Boolean + + + None + + + FullName + + Specifies a full name for the target account. + + String + + String + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + InputObject + + If you already have a user definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter. + + GPPItemUser + + GPPItemUser + + + None + + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new user definition object to the pipeline. + + + SwitchParameter + + + False + + + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + + Boolean + + Boolean + + + None + + + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + + Boolean + + Boolean + + + None + + + + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + + Action + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + + + Update + Delete + + GPPItemUserActionDisplay + + GPPItemUserActionDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + Description + + Sets the description of a user object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean + + Boolean + + + None + + + FullName + + Specifies a full name for the target account. + + String + + String + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + Name + + Specifies the name of a user which you want to change. Supports wildcards. + + String + + String + + + None + + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new user definition object to the pipeline. + + + SwitchParameter + + + False + + + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + + Boolean + + Boolean + + + None + + + + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + + Action + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + + + Update + Delete + + GPPItemUserActionDisplay + + GPPItemUserActionDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + Description + + Sets the description of a user object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean + + Boolean + + + None + + + FullName + + Specifies a full name for the target account. + + String + + String + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + Name + + Specifies the name of a user which you want to change. Supports wildcards. + + String + + String + + + None + + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new user definition object to the pipeline. + + + SwitchParameter + + + False + + + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + + Boolean + + Boolean + + + None + + + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + + Boolean + + Boolean + + + None + + + + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + + Action + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + + + Update + Delete + + GPPItemUserActionDisplay + + GPPItemUserActionDisplay + + + None + + + Context + + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. + + + Machine + + GPPContext + + GPPContext + + + None + + + Description + + Sets the description of a user object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean + + Boolean + + + None + + + FullName + + Specifies a full name for the target account. + + String + + String + + + None + + + GPOId + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + + Guid + + Guid + + + None + + + LiteralName + + Specifies the name of a user which you want to change. Does not support wildcards. + + String + + String + + + None + + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new user definition object to the pipeline. + + + SwitchParameter + + + False + + + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + + Boolean + + Boolean + + + None + + + + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + Action - - Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + - ADD - REMOVE + Update + Delete - GPPItemGroupMemberAction + GPPItemUserActionDisplay - GPPItemGroupMemberAction + GPPItemUserActionDisplay None Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -7604,11 +14051,47 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None + + Description + + Sets the description of a user object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean + + Boolean + + + None + + + FullName + + Specifies a full name for the target account. + + String + + String + + + None + GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + Guid Guid @@ -7617,22 +14100,22 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - GroupUID - - Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - - Guid + LiteralName + + Specifies the name of a user which you want to change. Does not support wildcards. + + String - Guid + String None - - Name - - Specifies the name of a member which you want to change. - + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + String String @@ -7640,30 +14123,90 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None + + PassThru + + Returns a new user definition object to the pipeline. + + + SwitchParameter + + + False + + + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + + Boolean + + Boolean + + + None + + + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + + Boolean + + Boolean + + + None + - Set-GPPGroupMember - + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + Action - - Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + - ADD - REMOVE + Update + Delete - GPPItemGroupMemberAction + GPPItemUserActionDisplay - GPPItemGroupMemberAction + GPPItemUserActionDisplay None Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -7674,35 +14217,71 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + + Description + + Sets the description of a user object. + + String - Guid + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean + + Boolean + + + None + + + FullName + + Specifies a full name for the target account. + + String + + String None - GroupSID - - Specifies the SID of a group in which you want to change a member. - - SecurityIdentifier + GPOName + + Specifies the name of a GPO in which you want to search for users. + + String - SecurityIdentifier + String None - Name - - Specifies the name of a member which you want to change. - + InputObject + + If you already have a user definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter. + + GPPItemUser + + GPPItemUser + + + None + + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + String String @@ -7710,30 +14289,78 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None + + PassThru + + Returns a new user definition object to the pipeline. + + + SwitchParameter + + + False + + + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + + Boolean + + Boolean + + + None + - Set-GPPGroupMember - + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + Action - - Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + - ADD - REMOVE + Update + Delete - GPPItemGroupMemberAction + GPPItemUserActionDisplay - GPPItemGroupMemberAction + GPPItemUserActionDisplay None Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -7744,23 +14371,35 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + + Description + + Sets the description of a user object. + + String - Guid + String None - - GroupName - - Specifies the name of a group in which you want to change a member. - + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean + + Boolean + + + None + + + FullName + + Specifies a full name for the target account. + String String @@ -7769,10 +14408,10 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - Name - - Specifies the name of a member which you want to change. - + GPOName + + Specifies the name of a GPO in which you want to search for users. + String String @@ -7780,100 +14419,114 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - - Set-GPPGroupMember - Action - - Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - - - ADD - REMOVE - - GPPItemGroupMemberAction + InputObject + + If you already have a user definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter. + + GPPItemUser - GPPItemGroupMemberAction + GPPItemUser None - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + + String - GPPContext + String None - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + + PassThru + + Returns a new user definition object to the pipeline. + - Guid + SwitchParameter + + + False + + + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + + Boolean + + Boolean None - - GroupUID - - Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - - Guid + + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + + Boolean + + Boolean + + + None + + + + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean - Guid + Boolean None - - SID - - Specifies the SID of a member which you want to change. - - SecurityIdentifier + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime - SecurityIdentifier + DateTime None - - - Set-GPPGroupMember - + Action - - Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + - ADD - REMOVE + Update + Delete - GPPItemGroupMemberAction + GPPItemUserActionDisplay - GPPItemGroupMemberAction + GPPItemUserActionDisplay None Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -7884,136 +14537,150 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + + Description + + Sets the description of a user object. + + String - Guid + String None - - GroupSID - - Specifies the SID of a group in which you want to change a member. - - SecurityIdentifier + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean - SecurityIdentifier + Boolean None - - SID - - Specifies the SID of a member which you want to change. - - SecurityIdentifier + + FullName + + Specifies a full name for the target account. + + String - SecurityIdentifier + String None - - - Set-GPPGroupMember - Action - - Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - - - ADD - REMOVE - - GPPItemGroupMemberAction + GPOName + + Specifies the name of a GPO in which you want to search for users. + + String - GPPItemGroupMemberAction + String None - - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + + Name + + Specifies the name of a user which you want to change. Supports wildcards. + + String - GPPContext + String None - - GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - - Guid + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + + String - Guid + String None - - GroupName - - Specifies the name of a group in which you want to change a member. - - String + + PassThru + + Returns a new user definition object to the pipeline. + - String + SwitchParameter - None + False - - SID - - Specifies the SID of a member which you want to change. - - SecurityIdentifier + + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + + Boolean - SecurityIdentifier + Boolean None - Set-GPPGroupMember - + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + Action - - Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + - ADD - REMOVE + Update + Delete - GPPItemGroupMemberAction + GPPItemUserActionDisplay - GPPItemGroupMemberAction + GPPItemUserActionDisplay None Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -8024,11 +14691,11 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - + + Description + + Sets the description of a user object. + String String @@ -8036,23 +14703,23 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - GroupUID - - Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - - Guid + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean - Guid + Boolean None - - Name - - Specifies the name of a member which you want to change. - + + FullName + + Specifies a full name for the target account. + String String @@ -8060,45 +14727,35 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - - Set-GPPGroupMember - Action - - Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - - - ADD - REMOVE - - GPPItemGroupMemberAction + GPOName + + Specifies the name of a GPO in which you want to search for users. + + String - GPPItemGroupMemberAction + String None - - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + + Name + + Specifies the name of a user which you want to change. Supports wildcards. + + String - GPPContext + String None - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + String String @@ -8106,54 +14763,90 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - GroupSID - - Specifies the SID of a group in which you want to change a member. - - SecurityIdentifier + + PassThru + + Returns a new user definition object to the pipeline. + - SecurityIdentifier + SwitchParameter + + + False + + + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + + Boolean + + Boolean None - - Name - - Specifies the name of a member which you want to change. - - String + + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + + Boolean - String + Boolean None - Set-GPPGroupMember - + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + Action - - Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + - ADD - REMOVE + Update + Delete - GPPItemGroupMemberAction + GPPItemUserActionDisplay - GPPItemGroupMemberAction + GPPItemUserActionDisplay None Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -8164,11 +14857,11 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - + + Description + + Sets the description of a user object. + String String @@ -8176,11 +14869,23 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - GroupName - - Specifies the name of a group in which you want to change a member. - + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean + + Boolean + + + None + + + FullName + + Specifies a full name for the target account. + String String @@ -8189,10 +14894,10 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - Name - - Specifies the name of a member which you want to change. - + GPOName + + Specifies the name of a GPO in which you want to search for users. + String String @@ -8200,100 +14905,102 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - - Set-GPPGroupMember - Action - - Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - - - ADD - REMOVE - - GPPItemGroupMemberAction + LiteralName + + Specifies the name of a user which you want to change. Does not support wildcards. + + String - GPPItemGroupMemberAction + String None - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + + String + + String + + + None + + + PassThru + + Returns a new user definition object to the pipeline. + - GPPContext + SwitchParameter - None + False - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - - String + + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + + Boolean - String + Boolean None - - GroupUID - - Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - - Guid + + + Set-GPPUser + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean - Guid + Boolean None - - SID - - Specifies the SID of a member which you want to change. - - SecurityIdentifier + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime - SecurityIdentifier + DateTime None - - - Set-GPPGroupMember - + Action - - Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + - ADD - REMOVE + Update + Delete - GPPItemGroupMemberAction + GPPItemUserActionDisplay - GPPItemGroupMemberAction + GPPItemUserActionDisplay None Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + Machine @@ -8304,11 +15011,11 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - + + Description + + Sets the description of a user object. + String String @@ -8316,69 +15023,59 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - GroupSID - - Specifies the SID of a group in which you want to change a member. - - SecurityIdentifier + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean - SecurityIdentifier + Boolean None - - SID - - Specifies the SID of a member which you want to change. - - SecurityIdentifier + + FullName + + Specifies a full name for the target account. + + String - SecurityIdentifier + String None - - - Set-GPPGroupMember - Action - - Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - - - ADD - REMOVE - - GPPItemGroupMemberAction + GPOName + + Specifies the name of a GPO in which you want to search for users. + + String - GPPItemGroupMemberAction + String None - - Context - - Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - - - Machine - - GPPContext + + LiteralName + + Specifies the name of a user which you want to change. Does not support wildcards. + + String - GPPContext + String None - - GPOName - - Specifies the name of a GPO in which you want to search for groups. - + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + String String @@ -8386,26 +15083,37 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - GroupName - - Specifies the name of a group in which you want to change a member. - - String + + PassThru + + Returns a new user definition object to the pipeline. + - String + SwitchParameter + + + False + + + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + + Boolean + + Boolean None - - SID - - Specifies the SID of a member which you want to change. - - SecurityIdentifier + + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + + Boolean - SecurityIdentifier + Boolean None @@ -8413,23 +15121,60 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele - + + AccountDisabled + + Specifies that the target user account must be disabled. + + Boolean + + Boolean + + + None + + + AccountExpires + + Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used. + + DateTime + + DateTime + + + None + + Action - - Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group. - - GPPItemGroupMemberAction + + Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties. + For properties compatibility see help for New-GPPUser. + + GPPItemUserActionDisplay - GPPItemGroupMemberAction + GPPItemUserActionDisplay + + + None + + + BuiltInUser + + Allows you to target your user definition to a system built-in user, instead of a regular account. + + GPPItemUserSubAuthorityDisplay + + GPPItemUserSubAuthorityDisplay None Context - + Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented. - + GPPContext GPPContext @@ -8437,11 +15182,47 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None + + Description + + Sets the description of a user object. + + String + + String + + + None + + + Disable + + Disables processing of this group definition. In the GUI you'll see it greyed out. + + Boolean + + Boolean + + + None + + + FullName + + Specifies a full name for the target account. + + String + + String + + + None + GPOId - - Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. - + + Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain. + Guid Guid @@ -8451,9 +15232,9 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele GPOName - - Specifies the name of a GPO in which you want to search for groups. - + + Specifies the name of a GPO in which you want to search for users. + String String @@ -8462,46 +15243,46 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - GroupName - - Specifies the name of a group in which you want to change a member. - - String + InputObject + + If you already have a user definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter. + + GPPItemUser - String + GPPItemUser None - GroupSID - - Specifies the SID of a group in which you want to change a member. - - SecurityIdentifier + LiteralName + + Specifies the name of a user which you want to change. Does not support wildcards. + + String - SecurityIdentifier + String None - - GroupUID - - Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property. - - Guid + + Name + + Specifies the name of a user which you want to change. Supports wildcards. + + String - Guid + String None - - Name - - Specifies the name of a member which you want to change. - + + NewName + + Specifies a new name for a user if you want to rename it on target hosts. + String String @@ -8509,14 +15290,50 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele None - - SID - - Specifies the SID of a member which you want to change. - - SecurityIdentifier + + PassThru + + Returns a new user definition object to the pipeline. + + SwitchParameter - SecurityIdentifier + SwitchParameter + + + False + + + PasswordNeverExpires + + Speficies that the password of the target account should not expire. + + Boolean + + Boolean + + + None + + + UserMayNotChangePassword + + Specifies that the target account should not be able to change its password by itself. + + Boolean + + Boolean + + + None + + + UserMustChangePassword + + Specifies that the target account must change its password at the next logon. + + Boolean + + Boolean None @@ -8535,7 +15352,7 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele - System.Void + GPPItemUser @@ -8550,16 +15367,24 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele -------------------------- Example 1 -------------------------- - PS C:\> Set-GPPGroupMember -Name 'EXAMPLE\Administrator' -Action ADD -GroupName 'Administrators (built-in)' -GPOName 'Custom Group Policy' + PS C:\> Set-GPPUser -Name 'TEST-1' -GPOName 'Custom Group Policy' -NewName 'TEST2' - Sets the action to ADD for the "EXAMPLE\Administrator" user in the "Administrators (built-in)" group in a group policy named "Custom Group Policy". + For a user called "TEST-1" in the "Custom Group Policy" GPO sets that on target computers this user must be renamed to "TEST2" -------------------------- Example 2 -------------------------- - PS C:\> Set-GPPGroupMember -Name 'EXAMPLE\Administrator' -Action REMOVE -GroupSID 'S-1-5-32-544' -GPOName 'Custom Group Policy' + PS C:\> Set-GPPUser -Name 'TEST-1' -GPOId '70f86590-588a-4659-8880-3d2374604811' -Delete - Sets the action to REMOVE for the "EXAMPLE\Administrator" user in a group with the SID S-1-5-32-544 a group policy named "Custom Group Policy". + Specifies that a user called "TEST-1" must be deleted from all target computers, and saves these instructions in a GPO with ID 70f86590-588a-4659-8880-3d2374604811. + + + + -------------------------- Example 3 -------------------------- + PS C:\> $User = Get-GPPUser -Name 'TEST-1' -GPOName 'Custom Group Policy' +PS C:\> Set-GPPUser -InputObject $User -GPOName 'Custom Group Policy' -PasswordNeverExpires $true + + Retrieves a user definition from a GPO called "Custom Group Policy" and then saves it back, but with an option to never-ever change their password.