diff --git a/src/en-us/PSGPPreferences-help.xml b/src/en-us/PSGPPreferences-help.xml
index ca64369..0f8d92c 100644
--- a/src/en-us/PSGPPreferences-help.xml
+++ b/src/en-us/PSGPPreferences-help.xml
@@ -10,16 +10,16 @@
- Use this function to add a group into a Group Policy Object. First you have to create a new group object using New-GPPGroup. This function is useful if you want to add the same group object into several Group Policy objects. If you just want to create a single group and add it into a GPO immediately, you can just use the -GPOName/GPOId parameter at New-GPPGroup.
+ Use this function to add a group into a Group Policy Object. First you have to create a new group definition object using New-GPPGroup. This function is useful if you want to add the same group definition into several Group Policy objects. If you just want to create a single group and add it into a GPO immediately, you can just use the -GPOName/GPOId parameter at New-GPPGroup.
Add-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -32,9 +32,9 @@
GPOId
-
+
Specifies a Group Policy object ID into which you want to add a group. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -44,9 +44,9 @@
InputObject
-
- Specifies an object of a group which you want to add into a GPO. You can create one with New-GPPGroup.
-
+
+ Specifies an object of a group definition which you want to add into a GPO. You can create one with New-GPPGroup.
+
GPPItemGroup
GPPItemGroup
@@ -59,9 +59,9 @@
Add-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -74,9 +74,9 @@
GPOName
-
+
Specifies a Group Policy object name into which you want to add a group.
-
+
String
String
@@ -86,9 +86,9 @@
InputObject
-
- Specifies an object of a group which you want to add into a GPO. You can create one with New-GPPGroup.
-
+
+ Specifies an object of a group definition which you want to add into a GPO. You can create one with New-GPPGroup.
+
GPPItemGroup
GPPItemGroup
@@ -101,9 +101,9 @@
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
GPPContext
GPPContext
@@ -113,9 +113,9 @@
GPOId
-
+
Specifies a Group Policy object ID into which you want to add a group. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -125,9 +125,9 @@
GPOName
-
+
Specifies a Group Policy object name into which you want to add a group.
-
+
String
String
@@ -137,9 +137,9 @@
InputObject
-
- Specifies an object of a group which you want to add into a GPO. You can create one with New-GPPGroup.
-
+
+ Specifies an object of a group definition which you want to add into a GPO. You can create one with New-GPPGroup.
+
GPPItemGroup
GPPItemGroup
@@ -185,7 +185,7 @@
-------------------------- Example 2 --------------------------
PS C:\> Add-GPPGroup -InputObject $GroupObject -GPOId '31B2F340-016D-11D2-945F-00C04FB984F9'
- Adds a group object $GroupObject into a Group Policy by using its ID (see the description for the -GPOId parameter below).
+ Adds a group definition object $GroupObject into a Group Policy by using its ID (see the description for the -GPOId parameter below).
@@ -208,9 +208,9 @@
Add-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -223,9 +223,9 @@
GPOId
-
+
Specifies the ID of a GPO where the target group is. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -235,9 +235,9 @@
GroupUID
-
+
Specifies the UID of a target group. UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+
Guid
Guid
@@ -247,9 +247,9 @@
InputObject
-
+
Specifies a member object to add. Use New-GPPGroupMember to create one.
-
+
GPPItemGroupMember
GPPItemGroupMember
@@ -262,9 +262,9 @@
Add-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -277,9 +277,9 @@
GPOId
-
+
Specifies the ID of a GPO where the target group is. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -289,9 +289,9 @@
GroupSID
-
+
Specifies the SID of a target group.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -301,9 +301,9 @@
InputObject
-
+
Specifies a member object to add. Use New-GPPGroupMember to create one.
-
+
GPPItemGroupMember
GPPItemGroupMember
@@ -316,9 +316,9 @@
Add-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -331,9 +331,9 @@
GPOId
-
+
Specifies the ID of a GPO where the target group is. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -343,9 +343,9 @@
GroupName
-
+
Specifies the name of a target group.
-
+
String
String
@@ -355,9 +355,9 @@
InputObject
-
+
Specifies a member object to add. Use New-GPPGroupMember to create one.
-
+
GPPItemGroupMember
GPPItemGroupMember
@@ -370,9 +370,9 @@
Add-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -385,9 +385,9 @@
GPOName
-
+
Specifies the name of a GPO where the target group is.
-
+
String
String
@@ -397,9 +397,9 @@
GroupUID
-
+
Specifies the UID of a target group. UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+
Guid
Guid
@@ -409,9 +409,9 @@
InputObject
-
+
Specifies a member object to add. Use New-GPPGroupMember to create one.
-
+
GPPItemGroupMember
GPPItemGroupMember
@@ -424,9 +424,9 @@
Add-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -439,9 +439,9 @@
GPOName
-
+
Specifies the name of a GPO where the target group is.
-
+
String
String
@@ -451,9 +451,9 @@
GroupSID
-
+
Specifies the SID of a target group.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -463,9 +463,9 @@
InputObject
-
+
Specifies a member object to add. Use New-GPPGroupMember to create one.
-
+
GPPItemGroupMember
GPPItemGroupMember
@@ -478,9 +478,9 @@
Add-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -493,9 +493,9 @@
GPOName
-
+
Specifies the name of a GPO where the target group is.
-
+
String
String
@@ -505,9 +505,9 @@
GroupName
-
+
Specifies the name of a target group.
-
+
String
String
@@ -517,9 +517,9 @@
InputObject
-
+
Specifies a member object to add. Use New-GPPGroupMember to create one.
-
+
GPPItemGroupMember
GPPItemGroupMember
@@ -532,9 +532,9 @@
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
GPPContext
GPPContext
@@ -544,9 +544,9 @@
GPOId
-
+
Specifies the ID of a GPO where the target group is. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -556,9 +556,9 @@
GPOName
-
+
Specifies the name of a GPO where the target group is.
-
+
String
String
@@ -568,9 +568,9 @@
GroupName
-
+
Specifies the name of a target group.
-
+
String
String
@@ -580,9 +580,9 @@
GroupSID
-
+
Specifies the SID of a target group.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -592,9 +592,9 @@
GroupUID
-
+
Specifies the UID of a target group. UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+
Guid
Guid
@@ -604,9 +604,9 @@
InputObject
-
+
Specifies a member object to add. Use New-GPPGroupMember to create one.
-
+
GPPItemGroupMember
GPPItemGroupMember
@@ -660,6 +660,197 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
+
+
+ Add-GPPUser
+ Add
+ GPPUser
+
+ Adds a user item into a Group Policy Object
+
+
+
+ Use this function to add a user into a Group Policy Object. First you have to create a new user definition object using New-GPPUser. This function is useful if you want to add the same user definition into several Group Policy objects. If you just want to create a single user and add it into a GPO immediately, you can just use the -GPOName/GPOId parameter of New-GPPGroup.
+
+
+
+ Add-GPPUser
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies a Group Policy object ID into which you want to add a user. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ InputObject
+
+ Specifies an object of a user definition which you want to add into a GPO. You can create one with New-GPPUser.
+
+ GPPItemUser
+
+ GPPItemUser
+
+
+ None
+
+
+
+ Add-GPPUser
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies a Group Policy object name into which you want to add a user.
+
+ String
+
+ String
+
+
+ None
+
+
+ InputObject
+
+ Specifies an object of a user definition which you want to add into a GPO. You can create one with New-GPPUser.
+
+ GPPItemUser
+
+ GPPItemUser
+
+
+ None
+
+
+
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies a Group Policy object ID into which you want to add a user. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GPOName
+
+ Specifies a Group Policy object name into which you want to add a user.
+
+ String
+
+ String
+
+
+ None
+
+
+ InputObject
+
+ Specifies an object of a user definition which you want to add into a GPO. You can create one with New-GPPUser.
+
+ GPPItemUser
+
+ GPPItemUser
+
+
+ None
+
+
+
+
+
+ None
+
+
+
+
+
+
+
+
+
+ System.Void
+
+
+
+
+
+
+
+
+
+
+
+
+
+ -------------------------- Example 1 --------------------------
+ PS C:\> Add-GPPUser -InputObject $UserObject -GPOName 'TEST'
+
+ Adds a user definition object $Userbject into a Group Policy named TEST.
+
+
+
+ -------------------------- Example 2 --------------------------
+ PS C:\> Add-GPPUser -InputObject $UserObject -GPOId '31B2F340-016D-11D2-945F-00C04FB984F9'
+
+ Adds a user definition object $UserObject into a Group Policy by using its ID (see the description for the -GPOId parameter below).
+
+
+
+
+
Get-GPPGroup
@@ -677,9 +868,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -692,9 +883,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -704,9 +895,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Name
-
+
Specifies the name of a group you want to retrieve. Supports wildcards.
-
+
String
String
@@ -719,9 +910,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -734,9 +925,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -746,9 +937,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Name
-
+
Specifies the name of a group you want to retrieve. Supports wildcards.
-
+
String
String
@@ -761,9 +952,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -776,9 +967,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -788,9 +979,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
LiteralName
-
+
Name of a group you want to retrieve. Does NOT support wildcards.
-
+
String
String
@@ -803,9 +994,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -818,9 +1009,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -830,9 +1021,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
LiteralName
-
+
Name of a group you want to retrieve. Does NOT support wildcards.
-
+
String
String
@@ -845,9 +1036,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -860,9 +1051,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -872,9 +1063,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
+
Specifies the SID of a group you want to retrieve.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -887,9 +1078,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -902,9 +1093,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -914,9 +1105,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
+
Specifies the SID of a group you want to retrieve.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -929,9 +1120,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -944,9 +1135,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -956,9 +1147,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
UID
-
- Specifies the UID of a group you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+
+ Specifies the UID of a group definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
Guid
Guid
@@ -971,9 +1162,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -986,9 +1177,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -998,9 +1189,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
UID
-
- Specifies the UID of a group you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+
+ Specifies the UID of a group definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
Guid
Guid
@@ -1013,9 +1204,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroup
GPPSection
-
- You can use this parameter to easily extract group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
-
+
+ You can use this parameter to easily extract group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
GPPSection
GPPSection
@@ -1025,9 +1216,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Name
-
+
Specifies the name of a group you want to retrieve. Supports wildcards.
-
+
String
String
@@ -1040,9 +1231,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroup
GPPSection
-
- You can use this parameter to easily extract group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
-
+
+ You can use this parameter to easily extract group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
GPPSection
GPPSection
@@ -1052,9 +1243,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
LiteralName
-
+
Name of a group you want to retrieve. Does NOT support wildcards.
-
+
String
String
@@ -1067,9 +1258,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroup
GPPSection
-
- You can use this parameter to easily extract group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
-
+
+ You can use this parameter to easily extract group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
GPPSection
GPPSection
@@ -1079,9 +1270,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
+
Specifies the SID of a group you want to retrieve.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -1094,9 +1285,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroup
GPPSection
-
- You can use this parameter to easily extract group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
-
+
+ You can use this parameter to easily extract group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
GPPSection
GPPSection
@@ -1106,9 +1297,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
UID
-
- Specifies the UID of a group you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+
+ Specifies the UID of a group definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
Guid
Guid
@@ -1121,9 +1312,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
GPPContext
GPPContext
@@ -1133,9 +1324,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -1145,9 +1336,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -1157,9 +1348,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPPSection
-
- You can use this parameter to easily extract group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
-
+
+ You can use this parameter to easily extract group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
GPPSection
GPPSection
@@ -1169,9 +1360,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
LiteralName
-
+
Name of a group you want to retrieve. Does NOT support wildcards.
-
+
String
String
@@ -1181,9 +1372,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Name
-
+
Specifies the name of a group you want to retrieve. Supports wildcards.
-
+
String
String
@@ -1193,9 +1384,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
+
Specifies the SID of a group you want to retrieve.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -1205,9 +1396,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
UID
-
- Specifies the UID of a group you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+
+ Specifies the UID of a group definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
Guid
Guid
@@ -1246,21 +1437,21 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
-------------------------- Example 1 --------------------------
PS C:\> Get-GPPGroup -Name 'TEST-*' -GPOName 'Custom Group Policy'
- Returns all groups which names start with "TEST-" from a GPO called "Custom Group Policy".
+ Returns all group definitions where group name starts with "TEST-" from a GPO called "Custom Group Policy".
-------------------------- Example 2 --------------------------
PS C:\> Get-GPPGroup -LiteralName 'TEST-*' -GPOId '70f86590-588a-4659-8880-3d2374604811'
- Returns all groups which name is "TEST-*" from a GPO with an ID "70f86590-588a-4659-8880-3d2374604811".
+ Returns all group definitions where group name is "TEST-*" from a GPO with an ID "70f86590-588a-4659-8880-3d2374604811".
-------------------------- Example 3 --------------------------
PS C:\> Get-GPPGroup -UID '3B1BF433-38BF-47A5-925C-3DC32B6555B3' -GPOName 'Custom Group Policy'
- Returns a group with a UID "3B1BF433-38BF-47A5-925C-3DC32B6555B3" from a GPO called "Custom Group Policy".
+ Returns a group definition with a UID "3B1BF433-38BF-47A5-925C-3DC32B6555B3" from a GPO called "Custom Group Policy".
@@ -1283,9 +1474,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -1298,9 +1489,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -1310,9 +1501,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupUID
-
+
Specifies the UID of a group from which you want to get a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+
Guid
Guid
@@ -1322,9 +1513,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Name
-
+
Specifies the name of a member which you want to retrieve. Supports wildcards.
-
+
String
String
@@ -1337,9 +1528,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -1352,9 +1543,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -1364,9 +1555,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupSID
-
+
Specifies the SID of a group from which you want to get a member.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -1376,9 +1567,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Name
-
+
Specifies the name of a member which you want to retrieve. Supports wildcards.
-
+
String
String
@@ -1391,9 +1582,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -1406,9 +1597,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -1418,9 +1609,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupName
-
+
Specifies the name of a group from which you want to get a member.
-
+
String
String
@@ -1430,9 +1621,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Name
-
+
Specifies the name of a member which you want to retrieve. Supports wildcards.
-
+
String
String
@@ -1445,9 +1636,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -1460,9 +1651,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -1472,9 +1663,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupUID
-
+
Specifies the UID of a group from which you want to get a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+
Guid
Guid
@@ -1484,9 +1675,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
LiteralName
-
+
Specifies the name of a member which you want to retrieve. Does NOT support wildcards.
-
+
String
String
@@ -1499,9 +1690,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -1514,9 +1705,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -1526,9 +1717,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupSID
-
+
Specifies the SID of a group from which you want to get a member.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -1538,9 +1729,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
LiteralName
-
+
Specifies the name of a member which you want to retrieve. Does NOT support wildcards.
-
+
String
String
@@ -1553,9 +1744,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -1568,9 +1759,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -1580,9 +1771,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupName
-
+
Specifies the name of a group from which you want to get a member.
-
+
String
String
@@ -1592,9 +1783,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
LiteralName
-
+
Specifies the name of a member which you want to retrieve. Does NOT support wildcards.
-
+
String
String
@@ -1607,9 +1798,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -1622,9 +1813,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -1634,9 +1825,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupUID
-
+
Specifies the UID of a group from which you want to get a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+
Guid
Guid
@@ -1646,9 +1837,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
+
Specifies the SID of a member which you want to retrieve.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -1661,9 +1852,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -1676,9 +1867,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -1688,9 +1879,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupSID
-
+
Specifies the SID of a group from which you want to get a member.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -1700,9 +1891,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
+
Specifies the SID of a member which you want to retrieve.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -1715,9 +1906,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -1730,9 +1921,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -1742,9 +1933,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupName
-
+
Specifies the name of a group from which you want to get a member.
-
+
String
String
@@ -1754,9 +1945,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
+
Specifies the SID of a member which you want to retrieve.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -1769,9 +1960,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -1784,9 +1975,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -1796,9 +1987,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupUID
-
+
Specifies the UID of a group from which you want to get a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+
Guid
Guid
@@ -1808,9 +1999,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Name
-
+
Specifies the name of a member which you want to retrieve. Supports wildcards.
-
+
String
String
@@ -1823,9 +2014,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -1838,9 +2029,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -1850,9 +2041,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupSID
-
+
Specifies the SID of a group from which you want to get a member.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -1862,9 +2053,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Name
-
+
Specifies the name of a member which you want to retrieve. Supports wildcards.
-
+
String
String
@@ -1877,9 +2068,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -1892,9 +2083,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -1904,9 +2095,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupName
-
+
Specifies the name of a group from which you want to get a member.
-
+
String
String
@@ -1916,9 +2107,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Name
-
+
Specifies the name of a member which you want to retrieve. Supports wildcards.
-
+
String
String
@@ -1931,9 +2122,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -1946,9 +2137,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -1958,9 +2149,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupUID
-
+
Specifies the UID of a group from which you want to get a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+
Guid
Guid
@@ -1970,9 +2161,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
LiteralName
-
+
Specifies the name of a member which you want to retrieve. Does NOT support wildcards.
-
+
String
String
@@ -1985,9 +2176,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -2000,9 +2191,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -2012,9 +2203,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupSID
-
+
Specifies the SID of a group from which you want to get a member.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -2024,9 +2215,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
LiteralName
-
+
Specifies the name of a member which you want to retrieve. Does NOT support wildcards.
-
+
String
String
@@ -2039,9 +2230,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -2054,9 +2245,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -2066,9 +2257,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupName
-
+
Specifies the name of a group from which you want to get a member.
-
+
String
String
@@ -2078,9 +2269,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
LiteralName
-
+
Specifies the name of a member which you want to retrieve. Does NOT support wildcards.
-
+
String
String
@@ -2093,9 +2284,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -2108,9 +2299,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -2120,9 +2311,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupUID
-
+
Specifies the UID of a group from which you want to get a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+
Guid
Guid
@@ -2132,9 +2323,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
+
Specifies the SID of a member which you want to retrieve.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -2147,9 +2338,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -2162,9 +2353,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -2174,9 +2365,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupSID
-
+
Specifies the SID of a group from which you want to get a member.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -2186,9 +2377,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
+
Specifies the SID of a member which you want to retrieve.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -2201,9 +2392,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Get-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -2216,9 +2407,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -2228,9 +2419,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupName
-
+
Specifies the name of a group from which you want to get a member.
-
+
String
String
@@ -2240,9 +2431,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
+
Specifies the SID of a member which you want to retrieve.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -2255,9 +2446,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
GPPContext
GPPContext
@@ -2267,9 +2458,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
+
Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
Guid
Guid
@@ -2279,9 +2470,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
+
Specifies the name of a GPO in which you want to search for groups.
-
+
String
String
@@ -2291,9 +2482,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupName
-
+
Specifies the name of a group from which you want to get a member.
-
+
String
String
@@ -2303,9 +2494,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupSID
-
+
Specifies the SID of a group from which you want to get a member.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -2315,9 +2506,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GroupUID
-
+
Specifies the UID of a group from which you want to get a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+
Guid
Guid
@@ -2327,9 +2518,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
LiteralName
-
+
Specifies the name of a member which you want to retrieve. Does NOT support wildcards.
-
+
String
String
@@ -2339,9 +2530,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Name
-
+
Specifies the name of a member which you want to retrieve. Supports wildcards.
-
+
String
String
@@ -2351,9 +2542,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
+
Specifies the SID of a member which you want to retrieve.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -2414,78 +2605,71 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
- New-GPPGroup
- New
- GPPGroup
+ Get-GPPUser
+ Get
+ GPPUser
- Creates a new Group Policy Preferences group definition.
+ Retrieves a user from a given Group Policy Preferences instance.
- Creates a new Group Policy Preferences group definition. You can either save it in the memory for additional processing or immediately put into a GPO by using the -GPOName or -GPOId parameters.
- Note that available parameters depend on the action you choose: -Create, -Replace, -Update, or -Delete. This mimics the GUI behavior.
+ Retrieves a user from a given Group Policy Preferences instance. You can get that GPP object either from a GPO or you can pass one to the -GPPSection parameter (but that's mostly for module's internal stuff).
- New-GPPGroup
-
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+ Get-GPPUser
+
+ BuiltInUser
+
+ Allows you to search for user definitions of a system built-in user, instead of a regular account.
+
- Machine
+ Administrator
+ Guest
- GPPContext
+ GPPItemUserSubAuthorityDisplay
- GPPContext
+ GPPItemUserSubAuthorityDisplay
None
- Delete
-
- Sets the action property of the group definition to "Delete".
-
-
- SwitchParameter
-
-
- False
-
-
- GPOId
-
- Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+ GPPSection
+
+ You can use this parameter to easily extract user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
- Guid
+ GPPSection
None
+
+
+ Get-GPPUser
- Name
-
- Specifies the name of the group.
-
- String
+ BuiltInUser
+
+ Allows you to search for user definitions of a system built-in user, instead of a regular account.
+
+
+ Administrator
+ Guest
+
+ GPPItemUserSubAuthorityDisplay
- String
+ GPPItemUserSubAuthorityDisplay
None
-
-
- New-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -2497,48 +2681,41 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
- Delete
-
- Sets the action property of the group definition to "Delete".
-
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
- SwitchParameter
-
-
- False
-
-
- GPOName
-
- Specifies the name of a GPO into which you want to add the newly created group item.
-
- String
-
- String
+ Guid
None
+
+
+ Get-GPPUser
- Name
-
- Specifies the name of the group.
-
- String
+ BuiltInUser
+
+ Allows you to search for user definitions of a system built-in user, instead of a regular account.
+
+
+ Administrator
+ Guest
+
+ GPPItemUserSubAuthorityDisplay
- String
+ GPPItemUserSubAuthorityDisplay
None
-
-
- New-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -2549,33 +2726,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- DeleteAllGroups
-
- Sets the DeleteAllGroups attribute at the group object.
-
-
- SwitchParameter
-
-
- False
-
-
- DeleteAllUsers
-
- Sets the DeleteAllUsers attribute at the group object.
-
-
- SwitchParameter
-
-
- False
-
-
- Description
-
- Sets the description of a group object.
-
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
String
String
@@ -2583,22 +2738,29 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
+
+
+ Get-GPPUser
- Disable
-
- Disables processing of this group object. In the GUI you'll see it greyed out.
-
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
- SwitchParameter
+ GPPContext
- False
+ None
GPOId
-
- Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
Guid
Guid
@@ -2606,23 +2768,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- Members
-
- Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
- GPPItemGroupMember[]
-
- GPPItemGroupMember[]
-
-
- None
-
-
+
Name
-
- Specifies the name of the group.
-
+
+ Specifies the name of a group you want to retrieve. Supports wildcards.
+
String
String
@@ -2630,48 +2780,56 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
+
+
+ Get-GPPUser
- NewName
-
- Specifies the new name of the group if you want to rename it on target hosts.
-
- String
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
- String
+ GPPContext
None
-
- PassThru
-
- Returns a new group object to the pipeline.
-
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
+ String
- SwitchParameter
+ String
- False
+ None
-
- Update
-
- Sets the action property of the group definition to "Update".
-
+
+ Name
+
+ Specifies the name of a group you want to retrieve. Supports wildcards.
+
+ String
- SwitchParameter
+ String
- False
+ None
- New-GPPGroup
+ Get-GPPUser
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -2682,33 +2840,23 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- DeleteAllGroups
-
- Sets the DeleteAllGroups attribute at the group object.
-
-
- SwitchParameter
-
-
- False
-
-
- DeleteAllUsers
-
- Sets the DeleteAllUsers attribute at the group object.
-
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
- SwitchParameter
+ Guid
- False
+ None
-
- Description
-
- Sets the description of a group object.
-
+
+ LiteralName
+
+ Name of a user you want to retrieve. Does NOT support wildcards.
+
String
String
@@ -2716,22 +2864,29 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
+
+
+ Get-GPPUser
- Disable
-
- Disables processing of this group object. In the GUI you'll see it greyed out.
-
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
- SwitchParameter
+ GPPContext
- False
+ None
GPOName
-
- Specifies the name of a GPO into which you want to add the newly created group item.
-
+
+ Specifies the name of a GPO in which you want to search for users.
+
String
String
@@ -2739,23 +2894,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- Members
-
- Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
- GPPItemGroupMember[]
-
- GPPItemGroupMember[]
-
-
- None
-
- Name
-
- Specifies the name of the group.
-
+ LiteralName
+
+ Name of a user you want to retrieve. Does NOT support wildcards.
+
String
String
@@ -2763,48 +2906,56 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
+
+
+ Get-GPPUser
- NewName
-
- Specifies the new name of the group if you want to rename it on target hosts.
-
- String
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
- String
+ GPPContext
None
-
- PassThru
-
- Returns a new group object to the pipeline.
-
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
- SwitchParameter
+ Guid
- False
+ None
- Update
-
- Sets the action property of the group definition to "Update".
-
+ UID
+
+ Specifies the UID of a user definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property.
+
+ Guid
- SwitchParameter
+ Guid
- False
+ None
- New-GPPGroup
+ Get-GPPUser
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -2815,33 +2966,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- DeleteAllGroups
-
- Sets the DeleteAllGroups attribute at the group object.
-
-
- SwitchParameter
-
-
- False
-
-
- DeleteAllUsers
-
- Sets the DeleteAllUsers attribute at the group object.
-
-
- SwitchParameter
-
-
- False
-
-
- Description
-
- Sets the description of a group object.
-
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
String
String
@@ -2849,22 +2978,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- Disable
-
- Disables processing of this group object. In the GUI you'll see it greyed out.
-
-
- SwitchParameter
-
-
- False
-
- GPOId
-
- Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+ UID
+
+ Specifies the UID of a user definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property.
+
Guid
Guid
@@ -2872,23 +2990,26 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- Members
-
- Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
- GPPItemGroupMember[]
+
+
+ Get-GPPUser
+
+ GPPSection
+
+ You can use this parameter to easily extract user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
- GPPItemGroupMember[]
+ GPPSection
None
-
+
Name
-
- Specifies the name of the group.
-
+
+ Specifies the name of a group you want to retrieve. Supports wildcards.
+
String
String
@@ -2896,37 +3017,232 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- PassThru
-
- Returns a new group object to the pipeline.
-
+
+
+ Get-GPPUser
+
+ GPPSection
+
+ You can use this parameter to easily extract user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
- SwitchParameter
+ GPPSection
- False
+ None
- Replace
-
- Sets the action property of the group definition to "Replace".
-
+ LiteralName
+
+ Name of a user you want to retrieve. Does NOT support wildcards.
+
+ String
- SwitchParameter
+ String
- False
+ None
- New-GPPGroup
-
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
+ Get-GPPUser
+
+ GPPSection
+
+ You can use this parameter to easily extract user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
+
+ GPPSection
+
+
+ None
+
+
+ UID
+
+ Specifies the UID of a user definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+
+
+
+ BuiltInUser
+
+ Allows you to search for user definitions of a system built-in user, instead of a regular account.
+
+ GPPItemUserSubAuthorityDisplay
+
+ GPPItemUserSubAuthorityDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
+ String
+
+ String
+
+
+ None
+
+
+ GPPSection
+
+ You can use this parameter to easily extract user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
+
+ GPPSection
+
+
+ None
+
+
+ LiteralName
+
+ Name of a user you want to retrieve. Does NOT support wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a group you want to retrieve. Supports wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+ UID
+
+ Specifies the UID of a user definition you want to retrieve. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+
+
+
+ None
+
+
+
+
+
+
+
+
+
+ GPPItemUser
+
+
+
+
+
+
+
+
+
+
+
+
+
+ -------------------------- Example 1 --------------------------
+ PS C:\> Get-GPPUser -Name 'TEST-*' -GPOName 'Custom Group Policy'
+
+ Returns all user definitions where user name starts with "TEST-" from a GPO called "Custom Group Policy".
+
+
+
+ -------------------------- Example 2 --------------------------
+ PS C:\> Get-GPPUser -LiteralName 'TEST-*' -GPOId '70f86590-588a-4659-8880-3d2374604811'
+
+ Returns all user definitions where user name is "TEST-*" from a GPO with an ID "70f86590-588a-4659-8880-3d2374604811".
+
+
+
+ -------------------------- Example 3 --------------------------
+ PS C:\> Get-GPPUser -UID '3B1BF433-38BF-47A5-925C-3DC32B6555B3' -GPOName 'Custom Group Policy'
+
+ Returns a user definition with a UID "3B1BF433-38BF-47A5-925C-3DC32B6555B3" from a GPO called "Custom Group Policy".
+
+
+
+
+
+
+
+ New-GPPGroup
+ New
+ GPPGroup
+
+ Creates a new Group Policy Preferences group definition.
+
+
+
+ Creates a new Group Policy Preferences group definition. You can either save it in the memory for additional processing or immediately put into a GPO by using the -GPOName or -GPOId parameters.
+ Note that available parameters depend on the action you choose: -Create, -Replace, -Update, or -Delete. This mimics the GUI behavior.
+
+
+
+ New-GPPGroup
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
Machine
GPPContext
@@ -2936,33 +3252,34 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- DeleteAllGroups
-
- Sets the DeleteAllGroups attribute at the group object.
-
+
+ Delete
+
+ Sets the action property of the group definition to "Delete".
+
SwitchParameter
False
-
- DeleteAllUsers
-
- Sets the DeleteAllUsers attribute at the group object.
-
+
+ GPOId
+
+ Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
- SwitchParameter
+ Guid
- False
+ None
-
- Description
-
- Sets the description of a group object.
-
+
+ Name
+
+ Specifies the name of a group.
+
String
String
@@ -2970,11 +3287,29 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
+
+
+ New-GPPGroup
- Disable
-
- Disables processing of this group object. In the GUI you'll see it greyed out.
-
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ Delete
+
+ Sets the action property of the group definition to "Delete".
+
SwitchParameter
@@ -2983,9 +3318,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
- Specifies the name of a GPO into which you want to add the newly created group item.
-
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
String
String
@@ -2993,23 +3328,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- Members
-
- Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
- GPPItemGroupMember[]
-
- GPPItemGroupMember[]
-
-
- None
-
Name
-
- Specifies the name of the group.
-
+
+ Specifies the name of a group.
+
String
String
@@ -3017,36 +3340,14 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- PassThru
-
- Returns a new group object to the pipeline.
-
-
- SwitchParameter
-
-
- False
-
-
- Replace
-
- Sets the action property of the group definition to "Replace".
-
-
- SwitchParameter
-
-
- False
-
New-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -3057,22 +3358,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- Create
-
- Sets the action property of the group definition to "Create".
-
-
- SwitchParameter
-
-
- False
-
DeleteAllGroups
-
+
Sets the DeleteAllGroups attribute at the group object.
-
+
SwitchParameter
@@ -3081,9 +3371,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllUsers
-
+
Sets the DeleteAllUsers attribute at the group object.
-
+
SwitchParameter
@@ -3092,9 +3382,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Description
-
+
Sets the description of a group object.
-
+
String
String
@@ -3104,9 +3394,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
@@ -3115,9 +3405,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
- Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
+ Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
Guid
Guid
@@ -3127,9 +3417,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -3139,9 +3429,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Name
-
- Specifies the name of the group.
-
+
+ Specifies the name of a group.
+
String
String
@@ -3150,24 +3440,47 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
- PassThru
-
- Returns a new group object to the pipeline.
-
+ NewName
+
+ Specifies the new name of a group if you want to rename it on target hosts.
+
+ String
- SwitchParameter
+ String
- False
+ None
+
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Update
+
+ Sets the action property of the group definition to "Update".
+
+
+ SwitchParameter
+
+
+ False
New-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -3178,22 +3491,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- Create
-
- Sets the action property of the group definition to "Create".
-
-
- SwitchParameter
-
-
- False
-
DeleteAllGroups
-
+
Sets the DeleteAllGroups attribute at the group object.
-
+
SwitchParameter
@@ -3202,9 +3504,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllUsers
-
+
Sets the DeleteAllUsers attribute at the group object.
-
+
SwitchParameter
@@ -3213,9 +3515,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Description
-
+
Sets the description of a group object.
-
+
String
String
@@ -3225,9 +3527,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
@@ -3236,9 +3538,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
- Specifies the name of a GPO into which you want to add the newly created group item.
-
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
String
String
@@ -3248,9 +3550,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -3260,9 +3562,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Name
-
- Specifies the name of the group.
-
+
+ Specifies the name of a group.
+
String
String
@@ -3271,39 +3573,22 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
- PassThru
-
- Returns a new group object to the pipeline.
-
-
- SwitchParameter
-
-
- False
-
-
-
- New-GPPGroup
-
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+ NewName
+
+ Specifies the new name of a group if you want to rename it on target hosts.
+
+ String
- GPPContext
+ String
None
-
- Delete
-
- Sets the action property of the group definition to "Delete".
-
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
SwitchParameter
@@ -3311,90 +3596,24 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
False
- GPOId
-
- Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
-
- Guid
-
-
- None
-
-
- SID
-
- Specifies the SID of the group.
-
- SecurityIdentifier
-
- SecurityIdentifier
-
-
- None
-
-
-
- New-GPPGroup
-
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
-
- GPPContext
-
-
- None
-
-
- Delete
-
- Sets the action property of the group definition to "Delete".
-
+ Update
+
+ Sets the action property of the group definition to "Update".
+
SwitchParameter
False
-
- GPOName
-
- Specifies the name of a GPO into which you want to add the newly created group item.
-
- String
-
- String
-
-
- None
-
-
- SID
-
- Specifies the SID of the group.
-
- SecurityIdentifier
-
- SecurityIdentifier
-
-
- None
-
New-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -3407,9 +3626,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllGroups
-
+
Sets the DeleteAllGroups attribute at the group object.
-
+
SwitchParameter
@@ -3418,9 +3637,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllUsers
-
+
Sets the DeleteAllUsers attribute at the group object.
-
+
SwitchParameter
@@ -3429,9 +3648,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Description
-
+
Sets the description of a group object.
-
+
String
String
@@ -3441,9 +3660,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
@@ -3452,9 +3671,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
- Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
+ Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
Guid
Guid
@@ -3464,9 +3683,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -3474,11 +3693,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- NewName
-
- Specifies the new name of the group if you want to rename it on target hosts.
-
+
+ Name
+
+ Specifies the name of a group.
+
String
String
@@ -3488,9 +3707,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
PassThru
-
- Returns a new group object to the pipeline.
-
+
+ Returns a new group definition object to the pipeline.
+
SwitchParameter
@@ -3498,22 +3717,10 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
False
- SID
-
- Specifies the SID of the group.
-
- SecurityIdentifier
-
- SecurityIdentifier
-
-
- None
-
-
- Update
-
- Sets the action property of the group definition to "Update".
-
+ Replace
+
+ Sets the action property of the group definition to "Replace".
+
SwitchParameter
@@ -3525,9 +3732,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
New-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -3540,9 +3747,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllGroups
-
+
Sets the DeleteAllGroups attribute at the group object.
-
+
SwitchParameter
@@ -3551,9 +3758,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllUsers
-
+
Sets the DeleteAllUsers attribute at the group object.
-
+
SwitchParameter
@@ -3562,9 +3769,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Description
-
+
Sets the description of a group object.
-
+
String
String
@@ -3574,9 +3781,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
@@ -3585,9 +3792,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
- Specifies the name of a GPO into which you want to add the newly created group item.
-
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
String
String
@@ -3597,9 +3804,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -3607,11 +3814,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- NewName
-
- Specifies the new name of the group if you want to rename it on target hosts.
-
+
+ Name
+
+ Specifies the name of a group.
+
String
String
@@ -3621,9 +3828,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
PassThru
-
- Returns a new group object to the pipeline.
-
+
+ Returns a new group definition object to the pipeline.
+
SwitchParameter
@@ -3631,22 +3838,10 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
False
- SID
-
- Specifies the SID of the group.
-
- SecurityIdentifier
-
- SecurityIdentifier
-
-
- None
-
-
- Update
-
- Sets the action property of the group definition to "Update".
-
+ Replace
+
+ Sets the action property of the group definition to "Replace".
+
SwitchParameter
@@ -3658,9 +3853,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
New-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -3671,11 +3866,22 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
+
+ Create
+
+ Sets the action property of the group definition to "Create".
+
+
+ SwitchParameter
+
+
+ False
+
DeleteAllGroups
-
+
Sets the DeleteAllGroups attribute at the group object.
-
+
SwitchParameter
@@ -3684,9 +3890,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllUsers
-
+
Sets the DeleteAllUsers attribute at the group object.
-
+
SwitchParameter
@@ -3695,9 +3901,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Description
-
+
Sets the description of a group object.
-
+
String
String
@@ -3707,9 +3913,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
@@ -3718,9 +3924,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
- Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
+ Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
Guid
Guid
@@ -3730,9 +3936,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -3740,48 +3946,37 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- PassThru
-
- Returns a new group object to the pipeline.
-
+
+ Name
+
+ Specifies the name of a group.
+
+ String
- SwitchParameter
+ String
- False
+ None
-
- Replace
-
- Sets the action property of the group definition to "Replace".
-
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
SwitchParameter
False
-
- SID
-
- Specifies the SID of the group.
-
- SecurityIdentifier
-
- SecurityIdentifier
-
-
- None
-
New-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -3792,11 +3987,22 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
+
+ Create
+
+ Sets the action property of the group definition to "Create".
+
+
+ SwitchParameter
+
+
+ False
+
DeleteAllGroups
-
+
Sets the DeleteAllGroups attribute at the group object.
-
+
SwitchParameter
@@ -3805,9 +4011,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllUsers
-
+
Sets the DeleteAllUsers attribute at the group object.
-
+
SwitchParameter
@@ -3816,9 +4022,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Description
-
+
Sets the description of a group object.
-
+
String
String
@@ -3828,9 +4034,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
@@ -3839,9 +4045,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
- Specifies the name of a GPO into which you want to add the newly created group item.
-
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
String
String
@@ -3851,9 +4057,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -3861,33 +4067,75 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
+
+ Name
+
+ Specifies the name of a group.
+
+ String
+
+ String
+
+
+ None
+
PassThru
-
- Returns a new group object to the pipeline.
-
+
+ Returns a new group definition object to the pipeline.
+
SwitchParameter
False
+
+
+ New-GPPGroup
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
- Replace
-
- Sets the action property of the group definition to "Replace".
-
+ Delete
+
+ Sets the action property of the group definition to "Delete".
+
SwitchParameter
False
+
+ GPOId
+
+ Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
SID
-
- Specifies the SID of the group.
-
+
+ Specifies the SID of a group.
+
SecurityIdentifier
SecurityIdentifier
@@ -3900,9 +4148,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
New-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -3914,55 +4162,97 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
- Create
-
- Sets the action property of the group definition to "Create".
-
-
- SwitchParameter
-
-
- False
-
-
- DeleteAllGroups
-
- Sets the DeleteAllGroups attribute at the group object.
-
+ Delete
+
+ Sets the action property of the group definition to "Delete".
+
SwitchParameter
False
-
- DeleteAllUsers
-
- Sets the DeleteAllUsers attribute at the group object.
-
+
+ GPOName
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
+ String
- SwitchParameter
+ String
- False
+ None
-
- Description
-
- Sets the description of a group object.
-
- String
+
+ SID
+
+ Specifies the SID of a group.
+
+ SecurityIdentifier
- String
+ SecurityIdentifier
None
-
+
+
+ New-GPPGroup
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ DeleteAllGroups
+
+ Sets the DeleteAllGroups attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllUsers
+
+ Sets the DeleteAllUsers attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Description
+
+ Sets the description of a group object.
+
+ String
+
+ String
+
+
+ None
+
+
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
@@ -3971,9 +4261,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
- Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
+ Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
Guid
Guid
@@ -3983,9 +4273,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -3993,11 +4283,23 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
+
+ NewName
+
+ Specifies the new name of a group if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
PassThru
-
- Returns a new group object to the pipeline.
-
+
+ Returns a new group definition object to the pipeline.
+
SwitchParameter
@@ -4006,9 +4308,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
- Specifies the SID of the group.
-
+
+ Specifies the SID of a group.
+
SecurityIdentifier
SecurityIdentifier
@@ -4016,14 +4318,25 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
+
+ Update
+
+ Sets the action property of the group definition to "Update".
+
+
+ SwitchParameter
+
+
+ False
+
New-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -4034,22 +4347,11 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- Create
-
- Sets the action property of the group definition to "Create".
-
-
- SwitchParameter
-
-
- False
-
DeleteAllGroups
-
+
Sets the DeleteAllGroups attribute at the group object.
-
+
SwitchParameter
@@ -4058,9 +4360,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllUsers
-
+
Sets the DeleteAllUsers attribute at the group object.
-
+
SwitchParameter
@@ -4069,9 +4371,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Description
-
+
Sets the description of a group object.
-
+
String
String
@@ -4081,9 +4383,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
@@ -4092,9 +4394,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
- Specifies the name of a GPO into which you want to add the newly created group item.
-
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
String
String
@@ -4104,9 +4406,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -4114,11 +4416,23 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
+
+ NewName
+
+ Specifies the new name of a group if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
PassThru
-
- Returns a new group object to the pipeline.
-
+
+ Returns a new group definition object to the pipeline.
+
SwitchParameter
@@ -4127,9 +4441,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
- Specifies the SID of the group.
-
+
+ Specifies the SID of a group.
+
SecurityIdentifier
SecurityIdentifier
@@ -4137,25 +4451,40 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
-
- New-GPPGroup
- Create
-
- Sets the action property of the group definition to "Create".
-
+ Update
+
+ Sets the action property of the group definition to "Update".
+
SwitchParameter
False
+
+
+ New-GPPGroup
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
DeleteAllGroups
-
+
Sets the DeleteAllGroups attribute at the group object.
-
+
SwitchParameter
@@ -4164,9 +4493,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllUsers
-
+
Sets the DeleteAllUsers attribute at the group object.
-
+
SwitchParameter
@@ -4175,9 +4504,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Description
-
+
Sets the description of a group object.
-
+
String
String
@@ -4187,20 +4516,32 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
False
+
+ GPOId
+
+ Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -4208,48 +4549,63 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- Name
-
- Specifies the name of the group.
-
- String
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
- String
+ SwitchParameter
- None
+ False
-
- PassThru
-
- Returns a new group object to the pipeline.
-
+
+ Replace
+
+ Sets the action property of the group definition to "Replace".
+
SwitchParameter
False
+
+ SID
+
+ Specifies the SID of a group.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
New-GPPGroup
-
- Create
-
- Sets the action property of the group definition to "Create".
-
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
- SwitchParameter
+ GPPContext
- False
+ None
DeleteAllGroups
-
+
Sets the DeleteAllGroups attribute at the group object.
-
+
SwitchParameter
@@ -4258,9 +4614,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllUsers
-
+
Sets the DeleteAllUsers attribute at the group object.
-
+
SwitchParameter
@@ -4269,9 +4625,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Description
-
+
Sets the description of a group object.
-
+
String
String
@@ -4281,20 +4637,32 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
False
+
+ GPOName
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
+ String
+
+ String
+
+
+ None
+
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -4304,9 +4672,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
PassThru
-
- Returns a new group object to the pipeline.
-
+
+ Returns a new group definition object to the pipeline.
+
SwitchParameter
@@ -4314,25 +4682,10 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
False
- SID
-
- Specifies the SID of the group.
-
- SecurityIdentifier
-
- SecurityIdentifier
-
-
- None
-
-
-
- New-GPPGroup
-
- Delete
-
- Sets the action property of the group definition to "Delete".
-
+ Replace
+
+ Sets the action property of the group definition to "Replace".
+
SwitchParameter
@@ -4340,13 +4693,13 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
False
- Name
-
- Specifies the name of the group.
-
- String
+ SID
+
+ Specifies the SID of a group.
+
+ SecurityIdentifier
- String
+ SecurityIdentifier
None
@@ -4354,37 +4707,37 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
New-GPPGroup
-
- Delete
-
- Sets the action property of the group definition to "Delete".
-
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
- SwitchParameter
+ GPPContext
- False
+ None
- SID
-
- Specifies the SID of the group.
-
- SecurityIdentifier
+ Create
+
+ Sets the action property of the group definition to "Create".
+
- SecurityIdentifier
+ SwitchParameter
- None
+ False
-
-
- New-GPPGroup
DeleteAllGroups
-
+
Sets the DeleteAllGroups attribute at the group object.
-
+
SwitchParameter
@@ -4393,9 +4746,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllUsers
-
+
Sets the DeleteAllUsers attribute at the group object.
-
+
SwitchParameter
@@ -4404,9 +4757,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Description
-
+
Sets the description of a group object.
-
+
String
String
@@ -4416,20 +4769,32 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
False
+
+ GPOId
+
+ Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -4437,60 +4802,63 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- Name
-
- Specifies the name of the group.
-
- String
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
- String
+ SwitchParameter
- None
+ False
-
- NewName
-
- Specifies the new name of the group if you want to rename it on target hosts.
-
- String
+
+ SID
+
+ Specifies the SID of a group.
+
+ SecurityIdentifier
- String
+ SecurityIdentifier
None
+
+
+ New-GPPGroup
- PassThru
-
- Returns a new group object to the pipeline.
-
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
- SwitchParameter
+ GPPContext
- False
+ None
- Update
-
- Sets the action property of the group definition to "Update".
-
+ Create
+
+ Sets the action property of the group definition to "Create".
+
SwitchParameter
False
-
-
- New-GPPGroup
DeleteAllGroups
-
+
Sets the DeleteAllGroups attribute at the group object.
-
+
SwitchParameter
@@ -4499,9 +4867,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllUsers
-
+
Sets the DeleteAllUsers attribute at the group object.
-
+
SwitchParameter
@@ -4510,9 +4878,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Description
-
+
Sets the description of a group object.
-
+
String
String
@@ -4522,20 +4890,32 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
False
-
+
+ GPOName
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
+ String
+
+ String
+
+
+ None
+
+
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -4543,11 +4923,70 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ SID
+
+ Specifies the SID of a group.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ New-GPPGroup
- Name
-
- Specifies the name of the group.
-
+ Create
+
+ Sets the action property of the group definition to "Create".
+
+
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllGroups
+
+ Sets the DeleteAllGroups attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllUsers
+
+ Sets the DeleteAllUsers attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Description
+
+ Sets the description of a group object.
+
String
String
@@ -4556,21 +4995,45 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
- PassThru
-
- Returns a new group object to the pipeline.
-
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
SwitchParameter
False
+
+ Members
+
+ Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
+
+ GPPItemGroupMember[]
+
+ GPPItemGroupMember[]
+
+
+ None
+
- Replace
-
- Sets the action property of the group definition to "Replace".
-
+ Name
+
+ Specifies the name of a group.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
SwitchParameter
@@ -4580,11 +5043,22 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
New-GPPGroup
+
+ Create
+
+ Sets the action property of the group definition to "Create".
+
+
+ SwitchParameter
+
+
+ False
+
DeleteAllGroups
-
+
Sets the DeleteAllGroups attribute at the group object.
-
+
SwitchParameter
@@ -4593,9 +5067,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllUsers
-
+
Sets the DeleteAllUsers attribute at the group object.
-
+
SwitchParameter
@@ -4604,9 +5078,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Description
-
+
Sets the description of a group object.
-
+
String
String
@@ -4616,9 +5090,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
@@ -4627,9 +5101,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -4638,10 +5112,47 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
- NewName
-
- Specifies the new name of the group if you want to rename it on target hosts.
-
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ SID
+
+ Specifies the SID of a group.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ New-GPPGroup
+
+ Delete
+
+ Sets the action property of the group definition to "Delete".
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Name
+
+ Specifies the name of a group.
+
String
String
@@ -4649,11 +5160,14 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
-
- PassThru
-
- Returns a new group object to the pipeline.
-
+
+
+ New-GPPGroup
+
+ Delete
+
+ Sets the action property of the group definition to "Delete".
+
SwitchParameter
@@ -4662,9 +5176,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
- Specifies the SID of the group.
-
+
+ Specifies the SID of a group.
+
SecurityIdentifier
SecurityIdentifier
@@ -4672,11 +5186,106 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
+
+
+ New-GPPGroup
+
+ DeleteAllGroups
+
+ Sets the DeleteAllGroups attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllUsers
+
+ Sets the DeleteAllUsers attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Description
+
+ Sets the description of a group object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Members
+
+ Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
+
+ GPPItemGroupMember[]
+
+ GPPItemGroupMember[]
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a group.
+
+ String
+
+ String
+
+
+ None
+
+
+ NewName
+
+ Specifies the new name of a group if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
Update
-
+
Sets the action property of the group definition to "Update".
-
+
SwitchParameter
@@ -4688,9 +5297,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
New-GPPGroup
DeleteAllGroups
-
+
Sets the DeleteAllGroups attribute at the group object.
-
+
SwitchParameter
@@ -4699,9 +5308,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllUsers
-
+
Sets the DeleteAllUsers attribute at the group object.
-
+
SwitchParameter
@@ -4710,9 +5319,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Description
-
+
Sets the description of a group object.
-
+
String
String
@@ -4722,9 +5331,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
@@ -4733,9 +5342,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -4743,11 +5352,23 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
None
+
+ Name
+
+ Specifies the name of a group.
+
+ String
+
+ String
+
+
+ None
+
PassThru
-
- Returns a new group object to the pipeline.
-
+
+ Returns a new group definition object to the pipeline.
+
SwitchParameter
@@ -4756,36 +5377,224 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Replace
-
+
Sets the action property of the group definition to "Replace".
-
+
SwitchParameter
False
-
- SID
-
- Specifies the SID of the group.
-
- SecurityIdentifier
+
+
+ New-GPPGroup
+
+ DeleteAllGroups
+
+ Sets the DeleteAllGroups attribute at the group object.
+
- SecurityIdentifier
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllUsers
+
+ Sets the DeleteAllUsers attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Description
+
+ Sets the description of a group object.
+
+ String
+
+ String
None
-
-
-
-
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
- GPPContext
+
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Members
+
+ Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
+
+ GPPItemGroupMember[]
+
+ GPPItemGroupMember[]
+
+
+ None
+
+
+ NewName
+
+ Specifies the new name of a group if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ SID
+
+ Specifies the SID of a group.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+ Update
+
+ Sets the action property of the group definition to "Update".
+
+
+ SwitchParameter
+
+
+ False
+
+
+
+ New-GPPGroup
+
+ DeleteAllGroups
+
+ Sets the DeleteAllGroups attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllUsers
+
+ Sets the DeleteAllUsers attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Description
+
+ Sets the description of a group object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Members
+
+ Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
+
+ GPPItemGroupMember[]
+
+ GPPItemGroupMember[]
+
+
+ None
+
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Replace
+
+ Sets the action property of the group definition to "Replace".
+
+
+ SwitchParameter
+
+
+ False
+
+
+ SID
+
+ Specifies the SID of a group.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+ GPPContext
GPPContext
@@ -4794,9 +5603,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Create
-
+
Sets the action property of the group definition to "Create".
-
+
SwitchParameter
SwitchParameter
@@ -4806,9 +5615,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Delete
-
+
Sets the action property of the group definition to "Delete".
-
+
SwitchParameter
SwitchParameter
@@ -4818,9 +5627,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllGroups
-
+
Sets the DeleteAllGroups attribute at the group object.
-
+
SwitchParameter
SwitchParameter
@@ -4830,9 +5639,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
DeleteAllUsers
-
+
Sets the DeleteAllUsers attribute at the group object.
-
+
SwitchParameter
SwitchParameter
@@ -4842,9 +5651,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Description
-
+
Sets the description of a group object.
-
+
String
String
@@ -4854,9 +5663,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
SwitchParameter
@@ -4866,9 +5675,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOId
-
- Specifies the ID of a GPO into which you want to add the newly created group item. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
+ Specifies the ID of a GPO into which you want to add the newly created group definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
Guid
Guid
@@ -4878,9 +5687,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
GPOName
-
- Specifies the name of a GPO into which you want to add the newly created group item.
-
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
String
String
@@ -4890,9 +5699,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Members
-
+
Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
+
GPPItemGroupMember[]
GPPItemGroupMember[]
@@ -4902,9 +5711,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Name
-
- Specifies the name of the group.
-
+
+ Specifies the name of a group.
+
String
String
@@ -4914,9 +5723,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
NewName
-
- Specifies the new name of the group if you want to rename it on target hosts.
-
+
+ Specifies the new name of a group if you want to rename it on target hosts.
+
String
String
@@ -4926,9 +5735,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
PassThru
-
- Returns a new group object to the pipeline.
-
+
+ Returns a new group definition object to the pipeline.
+
SwitchParameter
SwitchParameter
@@ -4938,9 +5747,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Replace
-
+
Sets the action property of the group definition to "Replace".
-
+
SwitchParameter
SwitchParameter
@@ -4950,9 +5759,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
SID
-
- Specifies the SID of the group.
-
+
+ Specifies the SID of a group.
+
SecurityIdentifier
SecurityIdentifier
@@ -4962,9 +5771,9 @@ PS C:\> Add-GPPGroupMember -InputObject $Member -GroupUID '3B1BF433-38BF-47A5
Update
-
+
Sets the action property of the group definition to "Update".
-
+
SwitchParameter
SwitchParameter
@@ -5011,7 +5820,7 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
-------------------------- Example 2 --------------------------
PS C:\> New-GPPGroup -Name 'TEST-1' -GPOId '70f86590-588a-4659-8880-3d2374604811' -Delete
- Creates a new group definition for a group called "TEST-1" with its action set to "Delete", and saved it in a GPO with ID 70f86590-588a-4659-8880-3d2374604811.
+ Creates a new group definition for a group called "TEST-1" with its action set to "Delete", and saves it in a GPO with ID 70f86590-588a-4659-8880-3d2374604811.
@@ -5048,9 +5857,9 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
New-GPPGroupMember
Action
-
+
Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
+
ADD
REMOVE
@@ -5064,9 +5873,9 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
Name
-
+
Specifies the name of a security principal.
-
+
String
String
@@ -5079,9 +5888,9 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
New-GPPGroupMember
Action
-
+
Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
+
ADD
REMOVE
@@ -5095,9 +5904,9 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
SID
-
+
Specifies the SID of a security principal.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -5110,9 +5919,9 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
Action
-
+
Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
+
GPPItemGroupMemberAction
GPPItemGroupMemberAction
@@ -5122,9 +5931,9 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
Name
-
+
Specifies the name of a security principal.
-
+
String
String
@@ -5134,9 +5943,9 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
SID
-
+
Specifies the SID of a security principal.
-
+
SecurityIdentifier
SecurityIdentifier
@@ -5190,66 +5999,48 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
- Remove-GPPGroup
- Remove
- GPPGroup
+ New-GPPUser
+ New
+ GPPUser
- Removes a group definition from a GPO object.
+ Creates a new Group Policy Preferences user definition.
- Removes a group definition from a GPO object.
+ Creates a new Group Policy Preferences user definition. You can either save it in the memory for additional processing or immediately put into a GPO by using the -GPOName or -GPOId parameters.
+ Note that available parameters depend on the action you choose: -Update or -Delete. This mimics the GUI behavior.
- Remove-GPPGroup
+ New-GPPUser
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
-
- GPPContext
-
-
- None
-
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
- Guid
+ SwitchParameter
- None
+ False
-
- Name
-
- Specifies the name of a group you want to remove from a GPO.
-
- String
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
- String
+ DateTime
None
-
-
- Remove-GPPGroup
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -5260,11 +6051,11 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
None
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
+
+ Description
+
+ Sets the description of a user object.
+
String
String
@@ -5272,41 +6063,34 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
None
-
- Name
-
- Specifies the name of a group you want to remove from a GPO.
-
- String
+
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
- String
+ SwitchParameter
- None
+ False
-
-
- Remove-GPPGroup
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
- GPPContext
+ String
None
GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
+ Specifies the ID of a GPO into which you want to add the newly created user definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
Guid
Guid
@@ -5315,67 +6099,93 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
None
- SID
-
- Specifies the SID of a group you want to remove from a GPO.
-
- SecurityIdentifier
+ Name
+
+ Specifies the name of a user.
+
+ String
- SecurityIdentifier
+ String
None
-
-
- Remove-GPPGroup
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+ NewName
+
+ Specifies the new name of a user if you want to rename it on target hosts.
+
+ String
- GPPContext
+ String
None
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
- String
+ Update
+
+ Sets the action property of the user definition to "Update".
+
- String
+ SwitchParameter
- None
+ False
- SID
-
- Specifies the SID of a group you want to remove from a GPO.
-
- SecurityIdentifier
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
- SecurityIdentifier
+ SwitchParameter
- None
+ False
- Remove-GPPGroup
+ New-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -5386,53 +6196,46 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
None
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+
+ Description
+
+ Sets the description of a user object.
+
+ String
- Guid
+ String
None
-
- UID
-
- Specifies the UID of a group you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
- Guid
+
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
- Guid
+ SwitchParameter
- None
+ False
-
-
- Remove-GPPGroup
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
- GPPContext
+ String
None
GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
String
String
@@ -5441,37 +6244,128 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
None
- UID
-
- Specifies the UID of a group you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
- Guid
+ Name
+
+ Specifies the name of a user.
+
+ String
- Guid
+ String
+
+
+ None
+
+
+ NewName
+
+ Specifies the new name of a user if you want to rename it on target hosts.
+
+ String
+
+ String
None
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Update
+
+ Sets the action property of the user definition to "Update".
+
+
+ SwitchParameter
+
+
+ False
+
+
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
+
+ SwitchParameter
+
+
+ False
+
- Remove-GPPGroup
-
- GPPSection
-
- You can use this parameter to easily remove group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
-
- GPPSection
+ New-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
- GPPSection
+ SwitchParameter
+
+
+ False
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
+ Description
+
+ Sets the description of a user object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
None
Name
-
- Specifies the name of a group you want to remove from a GPO.
-
+
+ Specifies the name of a user.
+
String
String
@@ -5479,53 +6373,121 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
None
-
-
- Remove-GPPGroup
-
- GPPSection
-
- You can use this parameter to easily remove group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
-
- GPPSection
+
+ NewName
+
+ Specifies the new name of a user if you want to rename it on target hosts.
+
+ String
- GPPSection
+ String
None
- SID
-
- Specifies the SID of a group you want to remove from a GPO.
-
- SecurityIdentifier
+ Update
+
+ Sets the action property of the user definition to "Update".
+
- SecurityIdentifier
+ SwitchParameter
- None
+ False
+
+
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
+
+ SwitchParameter
+
+
+ False
- Remove-GPPGroup
-
- GPPSection
-
- You can use this parameter to easily remove group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
-
- GPPSection
+ New-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
- GPPSection
+ SwitchParameter
+
+
+ False
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ Description
+
+ Sets the description of a user object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
None
- UID
-
- Specifies the UID of a group you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
+ GPOId
+
+ Specifies the ID of a GPO into which you want to add the newly created user definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
Guid
Guid
@@ -5533,266 +6495,105 @@ PS C:\> New-GPPGroup -Name 'TEST-1' -GPOName 'Custom Group Policy' -Create -M
None
-
-
-
-
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
- GPPContext
-
- GPPContext
-
-
- None
-
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
-
- Guid
-
-
- None
-
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
- String
-
- String
-
-
- None
-
-
- GPPSection
-
- You can use this parameter to easily remove group objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
-
- GPPSection
-
- GPPSection
-
-
- None
-
-
- Name
-
- Specifies the name of a group you want to remove from a GPO.
-
- String
-
- String
-
-
- None
-
-
- SID
-
- Specifies the SID of a group you want to remove from a GPO.
-
- SecurityIdentifier
-
- SecurityIdentifier
-
-
- None
-
-
- UID
-
- Specifies the UID of a group you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
- Guid
-
- Guid
-
-
- None
-
-
-
-
-
- None
-
-
-
-
-
-
-
-
-
- System.Void
-
-
-
-
-
-
-
-
-
-
-
-
-
- -------------------------- Example 1 --------------------------
- PS C:\> Remove-GPPGroup -Name 'TEST-*' -GPOName 'Custom Group Policy'
-
- Removes all groups named "TEST-*" from the "Custom Group Policy" GPO. The -Name parameter does not support wildcards.
-
-
-
- -------------------------- Example 2 --------------------------
- PS C:\> $Groups = Get-GPPGroup -Name 'TEST-*' -GPOName 'Custom Group Policy'
-PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Policy' }
-
- Removes all groups which name starts with "TEST-" from the "Custom Group Policy" GPO.
-
-
-
-
-
-
-
- Remove-GPPGroupMember
- Remove
- GPPGroupMember
-
- Removes a member from a group defined in a Group Policy object.
-
-
-
- Removes a member from a group defined in a Group Policy object. This doesn't necessary remove that member from computers to which the GPO applies - it depends on the group's and member's configuration.
-
-
-
- Remove-GPPGroupMember
-
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+
+ Name
+
+ Specifies the name of a user.
+
+ String
- GPPContext
+ String
None
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+
+ NewName
+
+ Specifies the new name of a user if you want to rename it on target hosts.
+
+ String
- Guid
+ String
None
-
- GroupUID
-
- Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
- Guid
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
- Guid
+ SwitchParameter
- None
+ False
-
- Name
-
- Specifies the name of a member which you want to remove.
-
- String
+
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
- String
+ SwitchParameter
- None
+ False
-
-
- Remove-GPPGroupMember
-
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+
+ Update
+
+ Sets the action property of the user definition to "Update".
+
- GPPContext
+ SwitchParameter
- None
+ False
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
- Guid
+ SwitchParameter
- None
+ False
-
- GroupSID
-
- Specifies the SID of a group from which you want to remove a member.
-
- SecurityIdentifier
+
+
+ New-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
- SecurityIdentifier
+ SwitchParameter
- None
+ False
-
- Name
-
- Specifies the name of a member which you want to remove.
-
- String
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
- String
+ DateTime
None
-
-
- Remove-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -5803,23 +6604,46 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli
None
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+
+ Description
+
+ Sets the description of a user object.
+
+ String
- Guid
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
None
- GroupName
-
- Specifies the name of a group from which you want to remove a member.
-
+ GPOName
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
String
String
@@ -5829,9 +6653,9 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli
Name
-
- Specifies the name of a member which you want to remove.
-
+
+ Specifies the name of a user.
+
String
String
@@ -5839,149 +6663,140 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli
None
-
-
- Remove-GPPGroupMember
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+ NewName
+
+ Specifies the new name of a user if you want to rename it on target hosts.
+
+ String
- GPPContext
+ String
None
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
- Guid
+ SwitchParameter
- None
+ False
-
- GroupUID
-
- Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
- Guid
+
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
- Guid
+ SwitchParameter
- None
+ False
- SID
-
- Specifies the SID of a member which you want to remove.
-
- SecurityIdentifier
+ Update
+
+ Sets the action property of the user definition to "Update".
+
- SecurityIdentifier
+ SwitchParameter
- None
+ False
+
+
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
+
+ SwitchParameter
+
+
+ False
- Remove-GPPGroupMember
+ New-GPPUser
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
- GPPContext
+ SwitchParameter
- None
+ False
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
- Guid
+ DateTime
None
-
- GroupSID
-
- Specifies the SID of a group from which you want to remove a member.
-
- SecurityIdentifier
+
+ Description
+
+ Sets the description of a user object.
+
+ String
- SecurityIdentifier
+ String
None
-
- SID
-
- Specifies the SID of a member which you want to remove.
-
- SecurityIdentifier
+
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
- SecurityIdentifier
+ SwitchParameter
- None
+ False
-
-
- Remove-GPPGroupMember
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
- GPPContext
+ String
None
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+ Name
+
+ Specifies the name of a user.
+
+ String
- Guid
+ String
None
-
- GroupName
-
- Specifies the name of a group from which you want to remove a member.
-
+
+ NewName
+
+ Specifies the new name of a user if you want to rename it on target hosts.
+
String
String
@@ -5989,80 +6804,86 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli
None
+
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
+
+ SwitchParameter
+
+
+ False
+
- SID
-
- Specifies the SID of a member which you want to remove.
-
- SecurityIdentifier
+ Update
+
+ Sets the action property of the user definition to "Update".
+
- SecurityIdentifier
+ SwitchParameter
- None
+ False
-
-
- Remove-GPPGroupMember
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
- GPPContext
+ SwitchParameter
- None
+ False
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
- String
+
+
+ New-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
- String
+ SwitchParameter
- None
+ False
-
- GroupUID
-
- Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
- Guid
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
- Guid
+ DateTime
None
- Name
-
- Specifies the name of a member which you want to remove.
-
- String
+ BuiltInUser
+
+ Allows you to target your user definition to a system built-in user, instead of a regular account.
+
+
+ Administrator
+ Guest
+
+ GPPItemUserSubAuthorityDisplay
- String
+ GPPItemUserSubAuthorityDisplay
None
-
-
- Remove-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -6073,11 +6894,11 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli
None
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
+
+ Description
+
+ Sets the description of a user object.
+
String
String
@@ -6085,23 +6906,22 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli
None
-
- GroupSID
-
- Specifies the SID of a group from which you want to remove a member.
-
- SecurityIdentifier
+
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
- SecurityIdentifier
+ SwitchParameter
- None
+ False
-
- Name
-
- Specifies the name of a member which you want to remove.
-
+
+ FullName
+
+ Specifies a full name for the target account.
+
String
String
@@ -6109,29 +6929,23 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli
None
-
-
- Remove-GPPGroupMember
-
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+
+ GPOId
+
+ Specifies the ID of a GPO into which you want to add the newly created user definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
- GPPContext
+ Guid
None
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
+
+ NewName
+
+ Specifies the new name of a user if you want to rename it on target hosts.
+
String
String
@@ -6139,92 +6953,86 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli
None
-
- GroupName
-
- Specifies the name of a group from which you want to remove a member.
-
- String
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
- String
+ SwitchParameter
- None
+ False
- Name
-
- Specifies the name of a member which you want to remove.
-
- String
+ Update
+
+ Sets the action property of the user definition to "Update".
+
- String
+ SwitchParameter
- None
+ False
-
-
- Remove-GPPGroupMember
-
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
- GPPContext
+ SwitchParameter
- None
+ False
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
- String
+
+
+ New-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
- String
+ SwitchParameter
- None
+ False
-
- GroupUID
-
- Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
- Guid
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
- Guid
+ DateTime
None
- SID
-
- Specifies the SID of a member which you want to remove.
-
- SecurityIdentifier
+ BuiltInUser
+
+ Allows you to target your user definition to a system built-in user, instead of a regular account.
+
+
+ Administrator
+ Guest
+
+ GPPItemUserSubAuthorityDisplay
- SecurityIdentifier
+ GPPItemUserSubAuthorityDisplay
None
-
-
- Remove-GPPGroupMember
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -6235,11 +7043,11 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli
None
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
+
+ Description
+
+ Sets the description of a user object.
+
String
String
@@ -6247,293 +7055,145 @@ PS C:\> $Groups | % { Remove-GPPGroup -UID $_.uid -GPOName 'Custom Group Poli
None
-
- GroupSID
-
- Specifies the SID of a group from which you want to remove a member.
-
- SecurityIdentifier
+
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
- SecurityIdentifier
+ SwitchParameter
+
+
+ False
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
None
- SID
-
- Specifies the SID of a member which you want to remove.
-
- SecurityIdentifier
+ GPOName
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
+ String
- SecurityIdentifier
+ String
None
-
-
- Remove-GPPGroupMember
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+ NewName
+
+ Specifies the new name of a user if you want to rename it on target hosts.
+
+ String
- GPPContext
+ String
None
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
- String
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
- String
+ SwitchParameter
- None
+ False
- GroupName
-
- Specifies the name of a group from which you want to remove a member.
-
- String
+ Update
+
+ Sets the action property of the user definition to "Update".
+
- String
+ SwitchParameter
- None
+ False
- SID
-
- Specifies the SID of a member which you want to remove.
-
- SecurityIdentifier
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
- SecurityIdentifier
+ SwitchParameter
- None
+ False
-
-
-
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
- GPPContext
-
- GPPContext
-
-
- None
-
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
-
- Guid
-
-
- None
-
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
- String
-
- String
-
-
- None
-
-
- GroupName
-
- Specifies the name of a group from which you want to remove a member.
-
- String
-
- String
-
-
- None
-
-
- GroupSID
-
- Specifies the SID of a group from which you want to remove a member.
-
- SecurityIdentifier
-
- SecurityIdentifier
-
-
- None
-
-
- GroupUID
-
- Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
- Guid
-
- Guid
-
-
- None
-
-
- Name
-
- Specifies the name of a member which you want to remove.
-
- String
-
- String
-
-
- None
-
-
- SID
-
- Specifies the SID of a member which you want to remove.
-
- SecurityIdentifier
-
- SecurityIdentifier
-
-
- None
-
-
-
-
-
- None
-
-
-
-
-
-
-
-
-
- System.Void
-
-
-
-
-
-
-
-
-
-
-
-
-
- -------------------------- Example 1 --------------------------
- PS C:\> Remove-GPPGroupMember -Name 'EXAMPLE\TEST-*' -GroupName 'TEST' -GPOName 'Custom Group Policy'
-
- Removes all groups named "TEST-*" from group "TEST" defined in the "Custom Group Policy" GPO. The -Name parameter does not support wildcards.
-
-
-
- -------------------------- Example 2 --------------------------
- PS C:\> $Members = Get-GPPGroupMember -Name 'EXAMPLE\TEST-*' -GPOName 'Custom Group Policy'
-PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2' -GPOName 'Custom Group Policy' }
-
- Removes all groups which name starts with "EXAMPLE\TEST-" from a group with SID "S-1-5-2" defined in the "Custom Group Policy" GPO.
-
-
-
-
-
-
-
- Set-GPPGroup
- Set
- GPPGroup
-
- Sets properties of a GPP group object in a specified Group Policy object.
-
-
-
- Sets properties of a GPP group object in a specified Group Policy object. You may also use it to write a GPP group object from memory into a GPO and changing some of its properties in the process. If you want just to add a group into a GPO, w/o any modifications, I suggest you to use Add-GPPGroup.
-
-
- Set-GPPGroup
+ New-GPPUser
- Action
-
- Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
- For properties compatibility see help for New-GPPGroup.
-
-
- Create
- Replace
- Update
- Delete
-
- GPPItemActionDisplay
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
- GPPItemActionDisplay
+ SwitchParameter
- None
+ False
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
+ BuiltInUser
+
+ Allows you to target your user definition to a system built-in user, instead of a regular account.
+
- Machine
+ Administrator
+ Guest
- GPPContext
+ GPPItemUserSubAuthorityDisplay
- GPPContext
+ GPPItemUserSubAuthorityDisplay
None
- DeleteAllGroups
-
- Sets the DeleteAllGroups attribute at the group object.
-
+ Description
+
+ Sets the description of a user object.
+
+ String
- SwitchParameter
+ String
- False
+ None
- DeleteAllUsers
-
- Sets the DeleteAllUsers attribute at the group object.
-
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
SwitchParameter
@@ -6541,10 +7201,10 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
False
- Description
-
- Sets the description of a group object.
-
+ FullName
+
+ Specifies a full name for the target account.
+
String
String
@@ -6553,102 +7213,86 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
None
- Disable
-
- Disables processing of this group object. In the GUI you'll see it greyed out.
-
+ NewName
+
+ Specifies the new name of a user if you want to rename it on target hosts.
+
+ String
- SwitchParameter
+ String
- False
+ None
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+ Update
+
+ Sets the action property of the user definition to "Update".
+
- Guid
+ SwitchParameter
- None
+ False
- InputObject
-
- If you already have a GPP group object in memory, which you want to write into a Group Policy, you can pass in into this parameter.
-
- GPPItemGroup
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
- GPPItemGroup
+ SwitchParameter
- None
+ False
+
+
+ New-GPPUser
- Members
-
- Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
- GPPItemGroupMember[]
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
- GPPItemGroupMember[]
+ SwitchParameter
- None
+ False
- NewName
-
- Specifies the new name of a group if you want to rename it on target hosts.
-
- String
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
- String
+ DateTime
None
-
- PassThru
-
- Returns a new group object to the pipeline.
-
+
+ BuiltInUser
+
+ Allows you to target your user definition to a system built-in user, instead of a regular account.
+
+
+ Administrator
+ Guest
+
+ GPPItemUserSubAuthorityDisplay
- SwitchParameter
+ GPPItemUserSubAuthorityDisplay
- False
-
-
-
- Set-GPPGroup
-
- Action
-
- Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
- For properties compatibility see help for New-GPPGroup.
-
-
- Create
- Replace
- Update
- Delete
-
- GPPItemActionDisplay
-
- GPPItemActionDisplay
-
-
- None
+ None
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -6660,21 +7304,22 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
None
- DeleteAllGroups
-
- Sets the DeleteAllGroups attribute at the group object.
-
+ Description
+
+ Sets the description of a user object.
+
+ String
- SwitchParameter
+ String
- False
+ None
- DeleteAllUsers
-
- Sets the DeleteAllUsers attribute at the group object.
-
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
SwitchParameter
@@ -6682,10 +7327,10 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
False
- Description
-
- Sets the description of a group object.
-
+ FullName
+
+ Specifies a full name for the target account.
+
String
String
@@ -6693,22 +7338,11 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
None
-
- Disable
-
- Disables processing of this group object. In the GUI you'll see it greyed out.
-
-
- SwitchParameter
-
-
- False
-
GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
+ Specifies the ID of a GPO into which you want to add the newly created user definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
Guid
Guid
@@ -6717,46 +7351,55 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
None
- Members
-
- Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
- GPPItemGroupMember[]
+ NewName
+
+ Specifies the new name of a user if you want to rename it on target hosts.
+
+ String
- GPPItemGroupMember[]
+ String
None
-
- Name
-
- Specifies the name of a group which you want to change.
-
- String
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
- String
+ SwitchParameter
- None
+ False
- NewName
-
- Specifies the new name of a group if you want to rename it on target hosts.
-
- String
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
- String
+ SwitchParameter
- None
+ False
+
+
+ Update
+
+ Sets the action property of the user definition to "Update".
+
+
+ SwitchParameter
+
+
+ False
- PassThru
-
- Returns a new group object to the pipeline.
-
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
SwitchParameter
@@ -6765,31 +7408,51 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
- Set-GPPGroup
+ New-GPPUser
- Action
-
- Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
- For properties compatibility see help for New-GPPGroup.
-
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
+ BuiltInUser
+
+ Allows you to target your user definition to a system built-in user, instead of a regular account.
+
- Create
- Replace
- Update
- Delete
+ Administrator
+ Guest
- GPPItemActionDisplay
+ GPPItemUserSubAuthorityDisplay
- GPPItemActionDisplay
+ GPPItemUserSubAuthorityDisplay
None
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -6800,33 +7463,11 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
None
-
- DeleteAllGroups
-
- Sets the DeleteAllGroups attribute at the group object.
-
-
- SwitchParameter
-
-
- False
-
-
- DeleteAllUsers
-
- Sets the DeleteAllUsers attribute at the group object.
-
-
- SwitchParameter
-
-
- False
-
Description
-
- Sets the description of a group object.
-
+
+ Sets the description of a user object.
+
String
String
@@ -6836,44 +7477,44 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
False
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
- Guid
+ String
None
-
- Members
-
- Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
- GPPItemGroupMember[]
+
+ GPOName
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
+ String
- GPPItemGroupMember[]
+ String
None
NewName
-
- Specifies the new name of a group if you want to rename it on target hosts.
-
+
+ Specifies the new name of a user if you want to rename it on target hosts.
+
String
String
@@ -6883,69 +7524,56 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
PassThru
-
- Returns a new group object to the pipeline.
-
+
+ Returns a new user definition object to the pipeline.
+
SwitchParameter
False
-
- SID
-
- Specifies the SID of a group which you want to change.
-
- SecurityIdentifier
+
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
- SecurityIdentifier
+ SwitchParameter
- None
+ False
-
-
- Set-GPPGroup
-
- Action
-
- Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
- For properties compatibility see help for New-GPPGroup.
-
-
- Create
- Replace
- Update
- Delete
-
- GPPItemActionDisplay
+
+ Update
+
+ Sets the action property of the user definition to "Update".
+
- GPPItemActionDisplay
+ SwitchParameter
- None
+ False
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
- GPPContext
+ SwitchParameter
- None
+ False
+
+
+ New-GPPUser
- DeleteAllGroups
-
- Sets the DeleteAllGroups attribute at the group object.
-
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
SwitchParameter
@@ -6953,21 +7581,38 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
False
- DeleteAllUsers
-
- Sets the DeleteAllUsers attribute at the group object.
-
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
- SwitchParameter
+ DateTime
- False
+ None
+
+
+ BuiltInUser
+
+ Allows you to target your user definition to a system built-in user, instead of a regular account.
+
+
+ Administrator
+ Guest
+
+ GPPItemUserSubAuthorityDisplay
+
+ GPPItemUserSubAuthorityDisplay
+
+
+ None
Description
-
- Sets the description of a group object.
-
+
+ Sets the description of a user object.
+
String
String
@@ -6977,20 +7622,20 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
False
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
+
+ FullName
+
+ Specifies a full name for the target account.
+
String
String
@@ -6998,47 +7643,45 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
None
-
- InputObject
-
- If you already have a GPP group object in memory, which you want to write into a Group Policy, you can pass in into this parameter.
-
- GPPItemGroup
+
+ NewName
+
+ Specifies the new name of a user if you want to rename it on target hosts.
+
+ String
- GPPItemGroup
+ String
None
- Members
-
- Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
- GPPItemGroupMember[]
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
- GPPItemGroupMember[]
+ SwitchParameter
- None
+ False
-
- NewName
-
- Specifies the new name of a group if you want to rename it on target hosts.
-
- String
+
+ Update
+
+ Sets the action property of the user definition to "Update".
+
- String
+ SwitchParameter
- None
+ False
- PassThru
-
- Returns a new group object to the pipeline.
-
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
SwitchParameter
@@ -7047,31 +7690,12 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
- Set-GPPGroup
-
- Action
-
- Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
- For properties compatibility see help for New-GPPGroup.
-
-
- Create
- Replace
- Update
- Delete
-
- GPPItemActionDisplay
-
- GPPItemActionDisplay
-
-
- None
-
+ New-GPPUser
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -7082,11 +7706,11 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
None
-
- DeleteAllGroups
-
- Sets the DeleteAllGroups attribute at the group object.
-
+
+ Delete
+
+ Sets the action property of the user definition to "Delete".
+
SwitchParameter
@@ -7094,33 +7718,10 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
False
- DeleteAllUsers
-
- Sets the DeleteAllUsers attribute at the group object.
-
-
- SwitchParameter
-
-
- False
-
-
- Description
-
- Sets the description of a group object.
-
- String
-
- String
-
-
- None
-
-
- Disable
-
- Disables processing of this group object. In the GUI you'll see it greyed out.
-
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
SwitchParameter
@@ -7128,46 +7729,22 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
False
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
- String
-
- String
-
-
- None
-
-
- Members
-
- Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
- GPPItemGroupMember[]
+ GPOId
+
+ Specifies the ID of a GPO into which you want to add the newly created user definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
- GPPItemGroupMember[]
+ Guid
None
Name
-
- Specifies the name of a group which you want to change.
-
- String
-
- String
-
-
- None
-
-
- NewName
-
- Specifies the new name of a group if you want to rename it on target hosts.
-
+
+ Specifies the name of a user.
+
String
String
@@ -7177,9 +7754,9 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
PassThru
-
- Returns a new group object to the pipeline.
-
+
+ Returns a new user definition object to the pipeline.
+
SwitchParameter
@@ -7188,31 +7765,12 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
- Set-GPPGroup
-
- Action
-
- Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
- For properties compatibility see help for New-GPPGroup.
-
-
- Create
- Replace
- Update
- Delete
-
- GPPItemActionDisplay
-
- GPPItemActionDisplay
-
-
- None
-
+ New-GPPUser
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -7223,11 +7781,11 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
None
-
- DeleteAllGroups
-
- Sets the DeleteAllGroups attribute at the group object.
-
+
+ Delete
+
+ Sets the action property of the user definition to "Delete".
+
SwitchParameter
@@ -7235,21 +7793,21 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
False
- DeleteAllUsers
-
- Sets the DeleteAllUsers attribute at the group object.
-
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
SwitchParameter
False
-
- Description
-
- Sets the description of a group object.
-
+
+ GPOName
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
String
String
@@ -7257,22 +7815,11 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
None
-
- Disable
-
- Disables processing of this group object. In the GUI you'll see it greyed out.
-
-
- SwitchParameter
-
-
- False
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
+ Name
+
+ Specifies the name of a user.
+
String
String
@@ -7281,34 +7828,35 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
None
- Members
-
- Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
- GPPItemGroupMember[]
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
- GPPItemGroupMember[]
+ SwitchParameter
- None
+ False
-
- NewName
-
- Specifies the new name of a group if you want to rename it on target hosts.
-
- String
+
+
+ New-GPPUser
+
+ Delete
+
+ Sets the action property of the user definition to "Delete".
+
- String
+ SwitchParameter
- None
+ False
- PassThru
-
- Returns a new group object to the pipeline.
-
+ Disable
+
+ Disables processing of this group object. In the GUI you'll see it greyed out.
+
SwitchParameter
@@ -7316,13 +7864,13 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
False
- SID
-
- Specifies the SID of a group which you want to change.
-
- SecurityIdentifier
+ Name
+
+ Specifies the name of a user.
+
+ String
- SecurityIdentifier
+ String
None
@@ -7331,47 +7879,58 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
- Action
-
- Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
- For properties compatibility see help for New-GPPGroup.
-
- GPPItemActionDisplay
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ SwitchParameter
- GPPItemActionDisplay
+ SwitchParameter
- None
+ False
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
- GPPContext
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
- GPPContext
+ DateTime
None
-
- DeleteAllGroups
-
- Sets the DeleteAllGroups attribute at the group object.
-
- SwitchParameter
+
+ BuiltInUser
+
+ Allows you to target your user definition to a system built-in user, instead of a regular account.
+
+ GPPItemUserSubAuthorityDisplay
- SwitchParameter
+ GPPItemUserSubAuthorityDisplay
- False
+ None
- DeleteAllUsers
-
- Sets the DeleteAllUsers attribute at the group object.
-
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ Delete
+
+ Sets the action property of the user definition to "Delete".
+
SwitchParameter
SwitchParameter
@@ -7381,9 +7940,9 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
Description
-
- Sets the description of a group object.
-
+
+ Sets the description of a user object.
+
String
String
@@ -7393,9 +7952,9 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
Disable
-
+
Disables processing of this group object. In the GUI you'll see it greyed out.
-
+
SwitchParameter
SwitchParameter
@@ -7403,11 +7962,23 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
False
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
+
+
+ None
+
GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
+ Specifies the ID of a GPO into which you want to add the newly created user definition. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
Guid
Guid
@@ -7417,9 +7988,9 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
+
+ Specifies the name of a GPO into which you want to add the newly created group definition.
+
String
String
@@ -7428,58 +7999,70 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
None
- InputObject
-
- If you already have a GPP group object in memory, which you want to write into a Group Policy, you can pass in into this parameter.
-
- GPPItemGroup
+ Name
+
+ Specifies the name of a user.
+
+ String
- GPPItemGroup
+ String
None
- Members
-
- Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
-
- GPPItemGroupMember[]
+ NewName
+
+ Specifies the new name of a user if you want to rename it on target hosts.
+
+ String
- GPPItemGroupMember[]
+ String
None
-
- Name
-
- Specifies the name of a group which you want to change.
-
- String
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+ SwitchParameter
- String
+ SwitchParameter
- None
+ False
- NewName
-
- Specifies the new name of a group if you want to rename it on target hosts.
-
- String
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
+ SwitchParameter
- String
+ SwitchParameter
- None
+ False
+
+
+ Update
+
+ Sets the action property of the user definition to "Update".
+
+ SwitchParameter
+
+ SwitchParameter
+
+
+ False
- PassThru
-
- Returns a new group object to the pipeline.
-
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
SwitchParameter
SwitchParameter
@@ -7488,16 +8071,16 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
False
- SID
-
- Specifies the SID of a group which you want to change.
-
- SecurityIdentifier
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
+ SwitchParameter
- SecurityIdentifier
+ SwitchParameter
- None
+ False
@@ -7513,7 +8096,7 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
- GPPItemGroup
+ GPPItemUser
@@ -7528,31 +8111,30 @@ PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2
-------------------------- Example 1 --------------------------
- PS C:\> Set-GPPGroup -SID 'S-1-5-32-544' -GPOName 'Custom Group Policy' -Action Update -Members $Members
+ PS C:\> New-GPPUser -Name 'TEST-1' -GPOName 'Custom Group Policy' -Update -NewName 'TEST2'
- Changes the action of the group definition of a group with SID "S-1-5-32-544" in the GPO "Custom Group Policy" to "Update" and sets it members to the value of the $Members variable.
+ Creates a new user definition for a user called "TEST-1" in a GPO called "Custom Group Policy". The definition will rename this user on target computers to "TEST2"
-------------------------- Example 2 --------------------------
- PS C:\> Set-GPPGroup -Name 'EXAMPLE\Test-Group' -GPOName 'Custom Group Policy' -Action Delete
+ PS C:\> New-GPPUser -Name 'TEST-1' -GPOId '70f86590-588a-4659-8880-3d2374604811' -Delete
- Changes the action of the group definition of a group called "EXAMPLE\Test-Group" in the GPO "Custom Group Policy" to "Delete".
+ Creates a new group definition for a user called "TEST-1" with its action set to "Delete", and saves it in a GPO with ID 70f86590-588a-4659-8880-3d2374604811.
-------------------------- Example 3 --------------------------
- PS C:\> $Group = Get-GPPGroup -Name 'EXAMPLE\Test-Group' -GPOName 'Custom Group Policy'
-PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -DeleteAllGroups -DeleteAllUsers
+ PS C:\> $UserDef = New-GPPUser -BuiltInUser Administrator -Update -PasswordNeverExpires
- Updates the definition of the "EXAMPLE\Test-Group" group in the "Custom Group Policy" GPO to delete all group and users from that group except for those explicitly defined in the group definition.
+ Creates a new user definition in the current PowerShell session for a built-in user "Administrator". This object defines that "Administrator"'s will never expire. Note that this group definition is not saved in any group policy object - it exists only in memory. You can modify it and later save in a GPO using Add-GPPUser.
-------------------------- Example 4 --------------------------
- PS C:\> Set-GPPGroup -Name 'EXAMPLE\Test-Group' -GPOName 'Custom Group Policy' -Disable
+ PS C:\> New-GPPUser -Name 'TEST-1' -Update -GPOName 'Custom Group Policy' -AccountExpires ((Get-Date).AddMonths(1)) -UserMustChangePassword
- Disables the group definition for a group called "EXAMPLE\Test-Group" in the "Custom Group Policy" GPO.
+ Creates a new user definition in a GPO named "Custom Group Policy". The definition specifies that all users named "TEST-1" on target computers should expire in a month.
@@ -7560,40 +8142,5905 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
- Set-GPPGroupMember
- Set
- GPPGroupMember
-
- Sets properties of a group member defined in a Group Policy object.
+ Remove-GPPGroup
+ Remove
+ GPPGroup
+
+ Removes a group definition from a GPO object.
- Sets properties of a group member defined in a Group Policy object. Well, actually the only property you can change is "Action" - there's just not much to set.
+ Removes a group definition from a GPO object.
- Set-GPPGroupMember
-
+ Remove-GPPGroup
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a group you want to remove from a GPO.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPGroup
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a group you want to remove from a GPO.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPGroup
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ LiteralName
+
+ Specifies the name of a group you want to remove from a GPO. Does NOT support wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPGroup
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ LiteralName
+
+ Specifies the name of a group you want to remove from a GPO. Does NOT support wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPGroup
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a group you want to remove from a GPO.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ Remove-GPPGroup
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a group you want to remove from a GPO.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ Remove-GPPGroup
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ UID
+
+ Specifies the UID of a group definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+
+ Remove-GPPGroup
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ UID
+
+ Specifies the UID of a group definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+
+ Remove-GPPGroup
+
+ GPPSection
+
+ You can use this parameter to easily remove group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
+
+ GPPSection
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a group you want to remove from a GPO.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPGroup
+
+ GPPSection
+
+ You can use this parameter to easily remove group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
+
+ GPPSection
+
+
+ None
+
+
+ LiteralName
+
+ Specifies the name of a group you want to remove from a GPO. Does NOT support wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPGroup
+
+ GPPSection
+
+ You can use this parameter to easily remove group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
+
+ GPPSection
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a group you want to remove from a GPO.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ Remove-GPPGroup
+
+ GPPSection
+
+ You can use this parameter to easily remove group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
+
+ GPPSection
+
+
+ None
+
+
+ UID
+
+ Specifies the UID of a group definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GPPSection
+
+ You can use this parameter to easily remove group definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
+
+ GPPSection
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a group you want to remove from a GPO.
+
+ String
+
+ String
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a group you want to remove from a GPO.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+ UID
+
+ Specifies the UID of a group definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those group definitions will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ LiteralName
+
+ Specifies the name of a group you want to remove from a GPO. Does NOT support wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+
+
+
+ None
+
+
+
+
+
+
+
+
+
+ System.Void
+
+
+
+
+
+
+
+
+
+
+
+
+
+ -------------------------- Example 1 --------------------------
+ PS C:\> Remove-GPPGroup -Name 'TEST-*' -GPOName 'Custom Group Policy'
+
+ Removes all group definitions where group names start with "TEST-*" from the "Custom Group Policy" GPO.
+
+
+
+
+
+
+
+ Remove-GPPGroupMember
+ Remove
+ GPPGroupMember
+
+ Removes a member from a group defined in a Group Policy object.
+
+
+
+ Removes a member from a group defined in a Group Policy object. This doesn't necessary remove that member from computers to which the GPO applies - it depends on the group's and member's configuration.
+
+
+
+ Remove-GPPGroupMember
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GroupUID
+
+ Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a member which you want to remove.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPGroupMember
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GroupSID
+
+ Specifies the SID of a group from which you want to remove a member.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a member which you want to remove.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPGroupMember
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GroupName
+
+ Specifies the name of a group from which you want to remove a member.
+
+ String
+
+ String
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a member which you want to remove.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPGroupMember
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GroupUID
+
+ Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a member which you want to remove.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ Remove-GPPGroupMember
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GroupSID
+
+ Specifies the SID of a group from which you want to remove a member.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a member which you want to remove.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ Remove-GPPGroupMember
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GroupName
+
+ Specifies the name of a group from which you want to remove a member.
+
+ String
+
+ String
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a member which you want to remove.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ Remove-GPPGroupMember
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupUID
+
+ Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a member which you want to remove.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPGroupMember
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupSID
+
+ Specifies the SID of a group from which you want to remove a member.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a member which you want to remove.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPGroupMember
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupName
+
+ Specifies the name of a group from which you want to remove a member.
+
+ String
+
+ String
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a member which you want to remove.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPGroupMember
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupUID
+
+ Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a member which you want to remove.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ Remove-GPPGroupMember
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupSID
+
+ Specifies the SID of a group from which you want to remove a member.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a member which you want to remove.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ Remove-GPPGroupMember
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupName
+
+ Specifies the name of a group from which you want to remove a member.
+
+ String
+
+ String
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a member which you want to remove.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupName
+
+ Specifies the name of a group from which you want to remove a member.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupSID
+
+ Specifies the SID of a group from which you want to remove a member.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+ GroupUID
+
+ Specifies the UID of a group from which you want to remove a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a member which you want to remove.
+
+ String
+
+ String
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a member which you want to remove.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+
+
+ None
+
+
+
+
+
+
+
+
+
+ System.Void
+
+
+
+
+
+
+
+
+
+
+
+
+
+ -------------------------- Example 1 --------------------------
+ PS C:\> Remove-GPPGroupMember -Name 'EXAMPLE\TEST-*' -GroupName 'TEST' -GPOName 'Custom Group Policy'
+
+ Removes all groups named "TEST-*" from group "TEST" defined in the "Custom Group Policy" GPO. The -Name parameter does not support wildcards.
+
+
+
+ -------------------------- Example 2 --------------------------
+ PS C:\> $Members = Get-GPPGroupMember -Name 'EXAMPLE\TEST-*' -GPOName 'Custom Group Policy'
+PS C:\> $Members | % { Remove-GPPGroupMember -Name $_.Name -GroupSID 'S-1-5-2' -GPOName 'Custom Group Policy' }
+
+ Removes all groups which name starts with "EXAMPLE\TEST-" from a group with SID "S-1-5-2" defined in the "Custom Group Policy" GPO.
+
+
+
+
+
+
+
+ Remove-GPPUser
+ Remove
+ GPPUser
+
+ Removes a user definition from a GPO object.
+
+
+
+ Removes a user definition from a GPO object.
+
+
+
+ Remove-GPPUser
+
+ BuiltInUser
+
+ Allows you to search for user definitions of a system built-in user, instead of a regular account.
+
+
+ RID_ADMIN
+ RID_GUEST
+
+ GPPItemUserSubAuthority
+
+ GPPItemUserSubAuthority
+
+
+ None
+
+
+ GPPSection
+
+ You can use this parameter to easily remove user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
+
+ GPPSection
+
+
+ None
+
+
+
+ Remove-GPPUser
+
+ BuiltInUser
+
+ Allows you to search for user definitions of a system built-in user, instead of a regular account.
+
+
+ RID_ADMIN
+ RID_GUEST
+
+ GPPItemUserSubAuthority
+
+ GPPItemUserSubAuthority
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+
+ Remove-GPPUser
+
+ BuiltInUser
+
+ Allows you to search for user definitions of a system built-in user, instead of a regular account.
+
+
+ RID_ADMIN
+ RID_GUEST
+
+ GPPItemUserSubAuthority
+
+ GPPItemUserSubAuthority
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPUser
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a user you want to remove from a GPO.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPUser
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
+ String
+
+ String
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a user you want to remove from a GPO.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPUser
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ LiteralName
+
+ Specifies the name of a user you want to remove from a GPO. Does NOT support wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPUser
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
+ String
+
+ String
+
+
+ None
+
+
+ LiteralName
+
+ Specifies the name of a user you want to remove from a GPO. Does NOT support wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPUser
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ UID
+
+ Specifies the UID of a user definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+
+ Remove-GPPUser
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
+ String
+
+ String
+
+
+ None
+
+
+ UID
+
+ Specifies the UID of a user definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+
+ Remove-GPPUser
+
+ GPPSection
+
+ You can use this parameter to easily remove user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
+
+ GPPSection
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a user you want to remove from a GPO.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPUser
+
+ GPPSection
+
+ You can use this parameter to easily remove user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
+
+ GPPSection
+
+
+ None
+
+
+ LiteralName
+
+ Specifies the name of a user you want to remove from a GPO. Does NOT support wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Remove-GPPUser
+
+ GPPSection
+
+ You can use this parameter to easily remove user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
+
+ GPPSection
+
+
+ None
+
+
+ UID
+
+ Specifies the UID of a user definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+
+
+
+ BuiltInUser
+
+ Allows you to search for user definitions of a system built-in user, instead of a regular account.
+
+ GPPItemUserSubAuthority
+
+ GPPItemUserSubAuthority
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
+ String
+
+ String
+
+
+ None
+
+
+ GPPSection
+
+ You can use this parameter to easily remove user definition objects from a GPPSection object which you already have in memory, but that parameter is here mostly for intra-module calls.
+
+ GPPSection
+
+ GPPSection
+
+
+ None
+
+
+ LiteralName
+
+ Specifies the name of a user you want to remove from a GPO. Does NOT support wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a user you want to remove from a GPO.
+
+ String
+
+ String
+
+
+ None
+
+
+ UID
+
+ Specifies the UID of a user definition you want to remove from a GPO. A UID is a unique identifier of an object in GPP. You can have several users with the same Name defined in the same Group Policy object - those user definitions will have different UIDs. You may get a UID of a user by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+
+
+
+ None
+
+
+
+
+
+
+
+
+
+ System.Void
+
+
+
+
+
+
+
+
+
+
+
+
+
+ -------------------------- Example 1 --------------------------
+ PS C:\> Remove-GPPUser -Name 'TEST-*' -GPOName 'Custom Group Policy'
+
+ Removes all user definitions where user names start with "TEST-*" from the "Custom Group Policy" GPO.
+
+
+
+
+
+
+
+ Set-GPPGroup
+ Set
+ GPPGroup
+
+ Sets properties of a group definition in a specified Group Policy object.
+
+
+
+ Sets properties of a group definition in a specified Group Policy object. You may also use it to write a group definition object from memory into a GPO and changing some of its properties in the process. If you want just to add a group definition into a GPO, w/o any modifications, I suggest you to use Add-GPPGroup.
+
+
+
+ Set-GPPGroup
+
+ Action
+
+ Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
+ For properties compatibility see help for New-GPPGroup.
+
+
+ Create
+ Replace
+ Update
+ Delete
+
+ GPPItemActionDisplay
+
+ GPPItemActionDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ DeleteAllGroups
+
+ Sets the DeleteAllGroups attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllUsers
+
+ Sets the DeleteAllUsers attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Description
+
+ Sets the description of a group object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ InputObject
+
+ If you already have a group definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter.
+
+ GPPItemGroup
+
+ GPPItemGroup
+
+
+ None
+
+
+ Members
+
+ Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
+
+ GPPItemGroupMember[]
+
+ GPPItemGroupMember[]
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a group if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+
+ Set-GPPGroup
+
+ Action
+
+ Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
+ For properties compatibility see help for New-GPPGroup.
+
+
+ Create
+ Replace
+ Update
+ Delete
+
+ GPPItemActionDisplay
+
+ GPPItemActionDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ DeleteAllGroups
+
+ Sets the DeleteAllGroups attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllUsers
+
+ Sets the DeleteAllUsers attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Description
+
+ Sets the description of a group object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ Members
+
+ Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
+
+ GPPItemGroupMember[]
+
+ GPPItemGroupMember[]
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a group which you want to change. Supports wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a group if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+
+ Set-GPPGroup
+
+ Action
+
+ Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
+ For properties compatibility see help for New-GPPGroup.
+
+
+ Create
+ Replace
+ Update
+ Delete
+
+ GPPItemActionDisplay
+
+ GPPItemActionDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ DeleteAllGroups
+
+ Sets the DeleteAllGroups attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllUsers
+
+ Sets the DeleteAllUsers attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Description
+
+ Sets the description of a group object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ Members
+
+ Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
+
+ GPPItemGroupMember[]
+
+ GPPItemGroupMember[]
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a group if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ LiteralName
+
+ Specifies the name of a group which you want to change. Does not support wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Set-GPPGroup
+
+ Action
+
+ Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
+ For properties compatibility see help for New-GPPGroup.
+
+
+ Create
+ Replace
+ Update
+ Delete
+
+ GPPItemActionDisplay
+
+ GPPItemActionDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ DeleteAllGroups
+
+ Sets the DeleteAllGroups attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllUsers
+
+ Sets the DeleteAllUsers attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Description
+
+ Sets the description of a group object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ Members
+
+ Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
+
+ GPPItemGroupMember[]
+
+ GPPItemGroupMember[]
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a group if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ SID
+
+ Specifies the SID of a group which you want to change.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ Set-GPPGroup
+
+ Action
+
+ Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
+ For properties compatibility see help for New-GPPGroup.
+
+
+ Create
+ Replace
+ Update
+ Delete
+
+ GPPItemActionDisplay
+
+ GPPItemActionDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ DeleteAllGroups
+
+ Sets the DeleteAllGroups attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllUsers
+
+ Sets the DeleteAllUsers attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Description
+
+ Sets the description of a group object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ InputObject
+
+ If you already have a group definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter.
+
+ GPPItemGroup
+
+ GPPItemGroup
+
+
+ None
+
+
+ Members
+
+ Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
+
+ GPPItemGroupMember[]
+
+ GPPItemGroupMember[]
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a group if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+
+ Set-GPPGroup
+
+ Action
+
+ Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
+ For properties compatibility see help for New-GPPGroup.
+
+
+ Create
+ Replace
+ Update
+ Delete
+
+ GPPItemActionDisplay
+
+ GPPItemActionDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ DeleteAllGroups
+
+ Sets the DeleteAllGroups attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllUsers
+
+ Sets the DeleteAllUsers attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Description
+
+ Sets the description of a group object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ Members
+
+ Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
+
+ GPPItemGroupMember[]
+
+ GPPItemGroupMember[]
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a group which you want to change. Supports wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a group if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+
+ Set-GPPGroup
+
+ Action
+
+ Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
+ For properties compatibility see help for New-GPPGroup.
+
+
+ Create
+ Replace
+ Update
+ Delete
+
+ GPPItemActionDisplay
+
+ GPPItemActionDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ DeleteAllGroups
+
+ Sets the DeleteAllGroups attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllUsers
+
+ Sets the DeleteAllUsers attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Description
+
+ Sets the description of a group object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ Members
+
+ Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
+
+ GPPItemGroupMember[]
+
+ GPPItemGroupMember[]
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a group if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ LiteralName
+
+ Specifies the name of a group which you want to change. Does not support wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Set-GPPGroup
+
+ Action
+
+ Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
+ For properties compatibility see help for New-GPPGroup.
+
+
+ Create
+ Replace
+ Update
+ Delete
+
+ GPPItemActionDisplay
+
+ GPPItemActionDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ DeleteAllGroups
+
+ Sets the DeleteAllGroups attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllUsers
+
+ Sets the DeleteAllUsers attribute at the group object.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ Description
+
+ Sets the description of a group object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ Members
+
+ Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
+
+ GPPItemGroupMember[]
+
+ GPPItemGroupMember[]
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a group if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ SID
+
+ Specifies the SID of a group which you want to change.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+
+
+ Action
+
+ Sets one of four actions which you can instruct the GPP engine to do with a group: Create, Replace, Update, or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a group object with some properties defined and change its action to "Delete", the object will be stripped off its properties. Same concept applies to other actions as well.
+ For properties compatibility see help for New-GPPGroup.
+
+ GPPItemActionDisplay
+
+ GPPItemActionDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ DeleteAllGroups
+
+ Sets the DeleteAllGroups attribute at the group object.
+
+ SwitchParameter
+
+ SwitchParameter
+
+
+ False
+
+
+ DeleteAllUsers
+
+ Sets the DeleteAllUsers attribute at the group object.
+
+ SwitchParameter
+
+ SwitchParameter
+
+
+ False
+
+
+ Description
+
+ Sets the description of a group object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ SwitchParameter
+
+ SwitchParameter
+
+
+ False
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ InputObject
+
+ If you already have a group definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter.
+
+ GPPItemGroup
+
+ GPPItemGroup
+
+
+ None
+
+
+ Members
+
+ Specifies which group members should be set for this group. Use New-GPPGroupMember to create them.
+
+ GPPItemGroupMember[]
+
+ GPPItemGroupMember[]
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a group which you want to change. Supports wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a group if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new group definition object to the pipeline.
+
+ SwitchParameter
+
+ SwitchParameter
+
+
+ False
+
+
+ SID
+
+ Specifies the SID of a group which you want to change.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+ LiteralName
+
+ Specifies the name of a group which you want to change. Does not support wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+
+
+
+ None
+
+
+
+
+
+
+
+
+
+ GPPItemGroup
+
+
+
+
+
+
+
+
+
+
+
+
+
+ -------------------------- Example 1 --------------------------
+ PS C:\> Set-GPPGroup -SID 'S-1-5-32-544' -GPOName 'Custom Group Policy' -Action Update -Members $Members
+
+ Changes the action of the group definition of a group with SID "S-1-5-32-544" in the GPO "Custom Group Policy" to "Update" and sets it members to the value of the $Members variable.
+
+
+
+ -------------------------- Example 2 --------------------------
+ PS C:\> Set-GPPGroup -Name 'EXAMPLE\Test-Group' -GPOName 'Custom Group Policy' -Action Delete
+
+ Changes the action of the group definition of a group called "EXAMPLE\Test-Group" in the GPO "Custom Group Policy" to "Delete".
+
+
+
+ -------------------------- Example 3 --------------------------
+ PS C:\> $Group = Get-GPPGroup -Name 'EXAMPLE\Test-Group' -GPOName 'Custom Group Policy'
+PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -DeleteAllGroups -DeleteAllUsers
+
+ Updates the definition of the "EXAMPLE\Test-Group" group in the "Custom Group Policy" GPO to delete all group and users from that group except for those explicitly defined in the group definition.
+
+
+
+ -------------------------- Example 4 --------------------------
+ PS C:\> Set-GPPGroup -Name 'EXAMPLE\Test-Group' -GPOName 'Custom Group Policy' -Disable
+
+ Disables the group definition for a group called "EXAMPLE\Test-Group" in the "Custom Group Policy" GPO.
+
+
+
+
+
+
+
+ Set-GPPGroupMember
+ Set
+ GPPGroupMember
+
+ Sets properties of a group member defined in a Group Policy object.
+
+
+
+ Sets properties of a group member defined in a Group Policy object. Well, actually the only property you can change is "Action" - there's just not much to set.
+
+
+
+ Set-GPPGroupMember
+
+ Action
+
+ Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
+
+
+ ADD
+ REMOVE
+
+ GPPItemGroupMemberAction
+
+ GPPItemGroupMemberAction
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GroupUID
+
+ Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a member which you want to change.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Set-GPPGroupMember
+
+ Action
+
+ Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
+
+
+ ADD
+ REMOVE
+
+ GPPItemGroupMemberAction
+
+ GPPItemGroupMemberAction
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GroupSID
+
+ Specifies the SID of a group in which you want to change a member.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a member which you want to change.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Set-GPPGroupMember
+
+ Action
+
+ Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
+
+
+ ADD
+ REMOVE
+
+ GPPItemGroupMemberAction
+
+ GPPItemGroupMemberAction
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GroupName
+
+ Specifies the name of a group in which you want to change a member.
+
+ String
+
+ String
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a member which you want to change.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Set-GPPGroupMember
+
+ Action
+
+ Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
+
+
+ ADD
+ REMOVE
+
+ GPPItemGroupMemberAction
+
+ GPPItemGroupMemberAction
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GroupUID
+
+ Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a member which you want to change.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ Set-GPPGroupMember
+
+ Action
+
+ Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
+
+
+ ADD
+ REMOVE
+
+ GPPItemGroupMemberAction
+
+ GPPItemGroupMemberAction
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GroupSID
+
+ Specifies the SID of a group in which you want to change a member.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a member which you want to change.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ Set-GPPGroupMember
+
+ Action
+
+ Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
+
+
+ ADD
+ REMOVE
+
+ GPPItemGroupMemberAction
+
+ GPPItemGroupMemberAction
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GroupName
+
+ Specifies the name of a group in which you want to change a member.
+
+ String
+
+ String
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a member which you want to change.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ Set-GPPGroupMember
+
+ Action
+
+ Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
+
+
+ ADD
+ REMOVE
+
+ GPPItemGroupMemberAction
+
+ GPPItemGroupMemberAction
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupUID
+
+ Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a member which you want to change.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Set-GPPGroupMember
+
+ Action
+
+ Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
+
+
+ ADD
+ REMOVE
+
+ GPPItemGroupMemberAction
+
+ GPPItemGroupMemberAction
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupSID
+
+ Specifies the SID of a group in which you want to change a member.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a member which you want to change.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Set-GPPGroupMember
+
+ Action
+
+ Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
+
+
+ ADD
+ REMOVE
+
+ GPPItemGroupMemberAction
+
+ GPPItemGroupMemberAction
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupName
+
+ Specifies the name of a group in which you want to change a member.
+
+ String
+
+ String
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a member which you want to change.
+
+ String
+
+ String
+
+
+ None
+
+
+
+ Set-GPPGroupMember
+
+ Action
+
+ Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
+
+
+ ADD
+ REMOVE
+
+ GPPItemGroupMemberAction
+
+ GPPItemGroupMemberAction
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupUID
+
+ Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a member which you want to change.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ Set-GPPGroupMember
+
+ Action
+
+ Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
+
+
+ ADD
+ REMOVE
+
+ GPPItemGroupMemberAction
+
+ GPPItemGroupMemberAction
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupSID
+
+ Specifies the SID of a group in which you want to change a member.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a member which you want to change.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+ Set-GPPGroupMember
+
+ Action
+
+ Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
+
+
+ ADD
+ REMOVE
+
+ GPPItemGroupMemberAction
+
+ GPPItemGroupMemberAction
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupName
+
+ Specifies the name of a group in which you want to change a member.
+
+ String
+
+ String
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a member which you want to change.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+
+
+ Action
+
+ Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
+
+ GPPItemGroupMemberAction
+
+ GPPItemGroupMemberAction
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for groups.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupName
+
+ Specifies the name of a group in which you want to change a member.
+
+ String
+
+ String
+
+
+ None
+
+
+ GroupSID
+
+ Specifies the SID of a group in which you want to change a member.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+ GroupUID
+
+ Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a member which you want to change.
+
+ String
+
+ String
+
+
+ None
+
+
+ SID
+
+ Specifies the SID of a member which you want to change.
+
+ SecurityIdentifier
+
+ SecurityIdentifier
+
+
+ None
+
+
+
+
+
+ None
+
+
+
+
+
+
+
+
+
+ System.Void
+
+
+
+
+
+
+
+
+
+
+
+
+
+ -------------------------- Example 1 --------------------------
+ PS C:\> Set-GPPGroupMember -Name 'EXAMPLE\Administrator' -Action ADD -GroupName 'Administrators (built-in)' -GPOName 'Custom Group Policy'
+
+ Sets the action to ADD for the "EXAMPLE\Administrator" user in the "Administrators (built-in)" group in a group policy named "Custom Group Policy".
+
+
+
+ -------------------------- Example 2 --------------------------
+ PS C:\> Set-GPPGroupMember -Name 'EXAMPLE\Administrator' -Action REMOVE -GroupSID 'S-1-5-32-544' -GPOName 'Custom Group Policy'
+
+ Sets the action to REMOVE for the "EXAMPLE\Administrator" user in a group with the SID S-1-5-32-544 a group policy named "Custom Group Policy".
+
+
+
+
+
+
+
+ Set-GPPUser
+ Set
+ GPPUser
+
+ Sets properties of a user definition in a specified Group Policy object.
+
+
+
+ Sets properties of a user definition in a specified Group Policy object. You may also use it to write a user definition object from memory into a GPO and changing some of its properties in the process. If you want just to add a user definition into a GPO, w/o any modifications, I suggest you to use Add-GPPUser.
+
+
+
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
+ Action
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
+
+ Update
+ Delete
+
+ GPPItemUserActionDisplay
+
+ GPPItemUserActionDisplay
+
+
+ None
+
+
+ BuiltInUser
+
+ Allows you to target your user definition to a system built-in user, instead of a regular account.
+
+
+ Administrator
+ Guest
+
+ GPPItemUserSubAuthorityDisplay
+
+ GPPItemUserSubAuthorityDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ Description
+
+ Sets the description of a user object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
+ Action
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
+
+ Update
+ Delete
+
+ GPPItemUserActionDisplay
+
+ GPPItemUserActionDisplay
+
+
+ None
+
+
+ BuiltInUser
+
+ Allows you to target your user definition to a system built-in user, instead of a regular account.
+
+
+ Administrator
+ Guest
+
+ GPPItemUserSubAuthorityDisplay
+
+ GPPItemUserSubAuthorityDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ Description
+
+ Sets the description of a user object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
+ String
+
+ String
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
+ Action
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
+
+ Update
+ Delete
+
+ GPPItemUserActionDisplay
+
+ GPPItemUserActionDisplay
+
+
+ None
+
+
+ BuiltInUser
+
+ Allows you to target your user definition to a system built-in user, instead of a regular account.
+
+
+ Administrator
+ Guest
+
+ GPPItemUserSubAuthorityDisplay
+
+ GPPItemUserSubAuthorityDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ Description
+
+ Sets the description of a user object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
+ Action
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
+
+ Update
+ Delete
+
+ GPPItemUserActionDisplay
+
+ GPPItemUserActionDisplay
+
+
+ None
+
+
+ BuiltInUser
+
+ Allows you to target your user definition to a system built-in user, instead of a regular account.
+
+
+ Administrator
+ Guest
+
+ GPPItemUserSubAuthorityDisplay
+
+ GPPItemUserSubAuthorityDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ Description
+
+ Sets the description of a user object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
+
+
+ None
+
+
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
+ String
+
+ String
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
+ Action
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
+
+ Update
+ Delete
+
+ GPPItemUserActionDisplay
+
+ GPPItemUserActionDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ Description
+
+ Sets the description of a user object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ InputObject
+
+ If you already have a user definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter.
+
+ GPPItemUser
+
+ GPPItemUser
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
+ Action
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
+
+ Update
+ Delete
+
+ GPPItemUserActionDisplay
+
+ GPPItemUserActionDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ Description
+
+ Sets the description of a user object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ InputObject
+
+ If you already have a user definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter.
+
+ GPPItemUser
+
+ GPPItemUser
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
+ Action
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
+
+ Update
+ Delete
+
+ GPPItemUserActionDisplay
+
+ GPPItemUserActionDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ Description
+
+ Sets the description of a user object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a user which you want to change. Supports wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
+ Action
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
+
+ Update
+ Delete
+
+ GPPItemUserActionDisplay
+
+ GPPItemUserActionDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ Description
+
+ Sets the description of a user object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ Name
+
+ Specifies the name of a user which you want to change. Supports wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
+ Action
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
+
+ Update
+ Delete
+
+ GPPItemUserActionDisplay
+
+ GPPItemUserActionDisplay
+
+
+ None
+
+
+ Context
+
+ Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
+
+
+ Machine
+
+ GPPContext
+
+ GPPContext
+
+
+ None
+
+
+ Description
+
+ Sets the description of a user object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
+
+
+ None
+
+
+ GPOId
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
+ Guid
+
+ Guid
+
+
+ None
+
+
+ LiteralName
+
+ Specifies the name of a user which you want to change. Does not support wildcards.
+
+ String
+
+ String
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
Action
-
- Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
- ADD
- REMOVE
+ Update
+ Delete
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
None
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -7604,11 +14051,47 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
+
+ Description
+
+ Sets the description of a user object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
+
+
+ None
+
GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
Guid
Guid
@@ -7617,22 +14100,22 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
- GroupUID
-
- Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
- Guid
+ LiteralName
+
+ Specifies the name of a user which you want to change. Does not support wildcards.
+
+ String
- Guid
+ String
None
-
- Name
-
- Specifies the name of a member which you want to change.
-
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
String
String
@@ -7640,30 +14123,90 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
- Set-GPPGroupMember
-
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
Action
-
- Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
- ADD
- REMOVE
+ Update
+ Delete
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
None
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -7674,35 +14217,71 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+
+ Description
+
+ Sets the description of a user object.
+
+ String
- Guid
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
None
- GroupSID
-
- Specifies the SID of a group in which you want to change a member.
-
- SecurityIdentifier
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
+ String
- SecurityIdentifier
+ String
None
- Name
-
- Specifies the name of a member which you want to change.
-
+ InputObject
+
+ If you already have a user definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter.
+
+ GPPItemUser
+
+ GPPItemUser
+
+
+ None
+
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
String
String
@@ -7710,30 +14289,78 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+
+ SwitchParameter
+
+
+ False
+
+
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
- Set-GPPGroupMember
-
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
Action
-
- Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
- ADD
- REMOVE
+ Update
+ Delete
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
None
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -7744,23 +14371,35 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+
+ Description
+
+ Sets the description of a user object.
+
+ String
- Guid
+ String
None
-
- GroupName
-
- Specifies the name of a group in which you want to change a member.
-
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
String
String
@@ -7769,10 +14408,10 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
- Name
-
- Specifies the name of a member which you want to change.
-
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
String
String
@@ -7780,100 +14419,114 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
-
- Set-GPPGroupMember
- Action
-
- Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
-
- ADD
- REMOVE
-
- GPPItemGroupMemberAction
+ InputObject
+
+ If you already have a user definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter.
+
+ GPPItemUser
- GPPItemGroupMemberAction
+ GPPItemUser
None
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
+ String
- GPPContext
+ String
None
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
- Guid
+ SwitchParameter
+
+
+ False
+
+
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
+ Boolean
+
+ Boolean
None
-
- GroupUID
-
- Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
- Guid
+
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
- Guid
+ Boolean
None
-
- SID
-
- Specifies the SID of a member which you want to change.
-
- SecurityIdentifier
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
- SecurityIdentifier
+ DateTime
None
-
-
- Set-GPPGroupMember
-
+
Action
-
- Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
- ADD
- REMOVE
+ Update
+ Delete
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
None
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -7884,136 +14537,150 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+
+ Description
+
+ Sets the description of a user object.
+
+ String
- Guid
+ String
None
-
- GroupSID
-
- Specifies the SID of a group in which you want to change a member.
-
- SecurityIdentifier
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
- SecurityIdentifier
+ Boolean
None
-
- SID
-
- Specifies the SID of a member which you want to change.
-
- SecurityIdentifier
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
- SecurityIdentifier
+ String
None
-
-
- Set-GPPGroupMember
- Action
-
- Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
-
- ADD
- REMOVE
-
- GPPItemGroupMemberAction
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
+ String
- GPPItemGroupMemberAction
+ String
None
-
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+
+ Name
+
+ Specifies the name of a user which you want to change. Supports wildcards.
+
+ String
- GPPContext
+ String
None
-
- GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
- Guid
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
+ String
- Guid
+ String
None
-
- GroupName
-
- Specifies the name of a group in which you want to change a member.
-
- String
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
- String
+ SwitchParameter
- None
+ False
-
- SID
-
- Specifies the SID of a member which you want to change.
-
- SecurityIdentifier
+
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
+ Boolean
- SecurityIdentifier
+ Boolean
None
- Set-GPPGroupMember
-
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
Action
-
- Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
- ADD
- REMOVE
+ Update
+ Delete
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
None
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -8024,11 +14691,11 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
+
+ Description
+
+ Sets the description of a user object.
+
String
String
@@ -8036,23 +14703,23 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
- GroupUID
-
- Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
- Guid
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
- Guid
+ Boolean
None
-
- Name
-
- Specifies the name of a member which you want to change.
-
+
+ FullName
+
+ Specifies a full name for the target account.
+
String
String
@@ -8060,45 +14727,35 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
-
- Set-GPPGroupMember
- Action
-
- Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
-
- ADD
- REMOVE
-
- GPPItemGroupMemberAction
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
+ String
- GPPItemGroupMemberAction
+ String
None
-
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+
+ Name
+
+ Specifies the name of a user which you want to change. Supports wildcards.
+
+ String
- GPPContext
+ String
None
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
String
String
@@ -8106,54 +14763,90 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
- GroupSID
-
- Specifies the SID of a group in which you want to change a member.
-
- SecurityIdentifier
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
- SecurityIdentifier
+ SwitchParameter
+
+
+ False
+
+
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
+ Boolean
+
+ Boolean
None
-
- Name
-
- Specifies the name of a member which you want to change.
-
- String
+
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
+ Boolean
- String
+ Boolean
None
- Set-GPPGroupMember
-
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
Action
-
- Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
- ADD
- REMOVE
+ Update
+ Delete
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
None
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -8164,11 +14857,11 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
+
+ Description
+
+ Sets the description of a user object.
+
String
String
@@ -8176,11 +14869,23 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
- GroupName
-
- Specifies the name of a group in which you want to change a member.
-
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
String
String
@@ -8189,10 +14894,10 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
- Name
-
- Specifies the name of a member which you want to change.
-
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
String
String
@@ -8200,100 +14905,102 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
-
- Set-GPPGroupMember
- Action
-
- Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
-
- ADD
- REMOVE
-
- GPPItemGroupMemberAction
+ LiteralName
+
+ Specifies the name of a user which you want to change. Does not support wildcards.
+
+ String
- GPPItemGroupMemberAction
+ String
None
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
+ String
+
+ String
+
+
+ None
+
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
- GPPContext
+ SwitchParameter
- None
+ False
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
- String
+
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
+ Boolean
- String
+ Boolean
None
-
- GroupUID
-
- Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
- Guid
+
+
+ Set-GPPUser
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
- Guid
+ Boolean
None
-
- SID
-
- Specifies the SID of a member which you want to change.
-
- SecurityIdentifier
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
- SecurityIdentifier
+ DateTime
None
-
-
- Set-GPPGroupMember
-
+
Action
-
- Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
- ADD
- REMOVE
+ Update
+ Delete
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
None
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
Machine
@@ -8304,11 +15011,11 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
+
+ Description
+
+ Sets the description of a user object.
+
String
String
@@ -8316,69 +15023,59 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
- GroupSID
-
- Specifies the SID of a group in which you want to change a member.
-
- SecurityIdentifier
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
- SecurityIdentifier
+ Boolean
None
-
- SID
-
- Specifies the SID of a member which you want to change.
-
- SecurityIdentifier
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
- SecurityIdentifier
+ String
None
-
-
- Set-GPPGroupMember
- Action
-
- Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
-
- ADD
- REMOVE
-
- GPPItemGroupMemberAction
+ GPOName
+
+ Specifies the name of a GPO in which you want to search for users.
+
+ String
- GPPItemGroupMemberAction
+ String
None
-
- Context
-
- Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
-
- Machine
-
- GPPContext
+
+ LiteralName
+
+ Specifies the name of a user which you want to change. Does not support wildcards.
+
+ String
- GPPContext
+ String
None
-
- GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
String
String
@@ -8386,26 +15083,37 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
- GroupName
-
- Specifies the name of a group in which you want to change a member.
-
- String
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
- String
+ SwitchParameter
+
+
+ False
+
+
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
+ Boolean
+
+ Boolean
None
-
- SID
-
- Specifies the SID of a member which you want to change.
-
- SecurityIdentifier
+
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
+ Boolean
- SecurityIdentifier
+ Boolean
None
@@ -8413,23 +15121,60 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
-
+
+ AccountDisabled
+
+ Specifies that the target user account must be disabled.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ AccountExpires
+
+ Specifies that this user account should expire at a given date in the future. Despite that you pass a full DateTime object to this parameter, only date will be used.
+
+ DateTime
+
+ DateTime
+
+
+ None
+
+
Action
-
- Specifies which action should GPP engine to execute regarding this security principal: either to ADD or to REMOVE it from a group.
-
- GPPItemGroupMemberAction
+
+ Sets one of two actions which you can instruct the GPP engine to do with a user: Update or Delete. Different actions have different sets of allowed parameters. The function initially does not restrict you from pass parameters incompatible with Action, but will correct them to be in accordance with the action. i.e. if you set -Action to "Delete" and -NewName to something, -NewName will be ignored. Also, if you have a user object with some properties defined and change its action to "Delete", the object will be stripped off its properties.
+ For properties compatibility see help for New-GPPUser.
+
+ GPPItemUserActionDisplay
- GPPItemGroupMemberAction
+ GPPItemUserActionDisplay
+
+
+ None
+
+
+ BuiltInUser
+
+ Allows you to target your user definition to a system built-in user, instead of a regular account.
+
+ GPPItemUserSubAuthorityDisplay
+
+ GPPItemUserSubAuthorityDisplay
None
Context
-
+
Specifies which Group Policy context to use: Machine or User. Doesn't do anything right now, since the User one has not yet been implemented.
-
+
GPPContext
GPPContext
@@ -8437,11 +15182,47 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
+
+ Description
+
+ Sets the description of a user object.
+
+ String
+
+ String
+
+
+ None
+
+
+ Disable
+
+ Disables processing of this group definition. In the GUI you'll see it greyed out.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ FullName
+
+ Specifies a full name for the target account.
+
+ String
+
+ String
+
+
+ None
+
GPOId
-
- Specifies the ID of a GPO in which you want to search for groups. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
-
+
+ Specifies the ID of a GPO in which you want to search for users. It is a name of a Group Policy's object in Active Directory. Look into a CN=Policies,CN=System container in your AD DS domain.
+
Guid
Guid
@@ -8451,9 +15232,9 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
GPOName
-
- Specifies the name of a GPO in which you want to search for groups.
-
+
+ Specifies the name of a GPO in which you want to search for users.
+
String
String
@@ -8462,46 +15243,46 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
- GroupName
-
- Specifies the name of a group in which you want to change a member.
-
- String
+ InputObject
+
+ If you already have a user definition object in memory, which you want to write into a Group Policy, you can pass in into this parameter.
+
+ GPPItemUser
- String
+ GPPItemUser
None
- GroupSID
-
- Specifies the SID of a group in which you want to change a member.
-
- SecurityIdentifier
+ LiteralName
+
+ Specifies the name of a user which you want to change. Does not support wildcards.
+
+ String
- SecurityIdentifier
+ String
None
-
- GroupUID
-
- Specifies the UID of a group in which you want to change a member. A UID is a unique identifier of an object in GPP. You can have several groups with the same Name/SID combination in the same Group Policy object - those groups will have different UIDs. You may get a UID of a group by looking at its "uid" property.
-
- Guid
+
+ Name
+
+ Specifies the name of a user which you want to change. Supports wildcards.
+
+ String
- Guid
+ String
None
-
- Name
-
- Specifies the name of a member which you want to change.
-
+
+ NewName
+
+ Specifies a new name for a user if you want to rename it on target hosts.
+
String
String
@@ -8509,14 +15290,50 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
None
-
- SID
-
- Specifies the SID of a member which you want to change.
-
- SecurityIdentifier
+
+ PassThru
+
+ Returns a new user definition object to the pipeline.
+
+ SwitchParameter
- SecurityIdentifier
+ SwitchParameter
+
+
+ False
+
+
+ PasswordNeverExpires
+
+ Speficies that the password of the target account should not expire.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ UserMayNotChangePassword
+
+ Specifies that the target account should not be able to change its password by itself.
+
+ Boolean
+
+ Boolean
+
+
+ None
+
+
+ UserMustChangePassword
+
+ Specifies that the target account must change its password at the next logon.
+
+ Boolean
+
+ Boolean
None
@@ -8535,7 +15352,7 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
- System.Void
+ GPPItemUser
@@ -8550,16 +15367,24 @@ PS C:\> Set-GPPGroup -InputObject $Group -GPOName 'Custom Group Policy' -Dele
-------------------------- Example 1 --------------------------
- PS C:\> Set-GPPGroupMember -Name 'EXAMPLE\Administrator' -Action ADD -GroupName 'Administrators (built-in)' -GPOName 'Custom Group Policy'
+ PS C:\> Set-GPPUser -Name 'TEST-1' -GPOName 'Custom Group Policy' -NewName 'TEST2'
- Sets the action to ADD for the "EXAMPLE\Administrator" user in the "Administrators (built-in)" group in a group policy named "Custom Group Policy".
+ For a user called "TEST-1" in the "Custom Group Policy" GPO sets that on target computers this user must be renamed to "TEST2"
-------------------------- Example 2 --------------------------
- PS C:\> Set-GPPGroupMember -Name 'EXAMPLE\Administrator' -Action REMOVE -GroupSID 'S-1-5-32-544' -GPOName 'Custom Group Policy'
+ PS C:\> Set-GPPUser -Name 'TEST-1' -GPOId '70f86590-588a-4659-8880-3d2374604811' -Delete
- Sets the action to REMOVE for the "EXAMPLE\Administrator" user in a group with the SID S-1-5-32-544 a group policy named "Custom Group Policy".
+ Specifies that a user called "TEST-1" must be deleted from all target computers, and saves these instructions in a GPO with ID 70f86590-588a-4659-8880-3d2374604811.
+
+
+
+ -------------------------- Example 3 --------------------------
+ PS C:\> $User = Get-GPPUser -Name 'TEST-1' -GPOName 'Custom Group Policy'
+PS C:\> Set-GPPUser -InputObject $User -GPOName 'Custom Group Policy' -PasswordNeverExpires $true
+
+ Retrieves a user definition from a GPO called "Custom Group Policy" and then saves it back, but with an option to never-ever change their password.