{"id":451,"date":"2016-07-06T17:20:27","date_gmt":"2016-07-06T16:20:27","guid":{"rendered":"http:\/\/snakenet.eu\/blog\/?p=451"},"modified":"2016-07-06T17:20:27","modified_gmt":"2016-07-06T16:20:27","slug":"kb3163622","status":"publish","type":"post","link":"https:\/\/snakenet.eu\/blog\/kb3163622\/451\/","title":{"rendered":"kb3163622"},"content":{"rendered":"<p>Microsoft a chang\u00e9 sa m\u00e9thode pour le rapatriement des GPO. Je vous passe les d\u00e9tails. Si vous voulez en savoir plus : https:\/\/support.microsoft.com\/en-us\/kb\/3163622<\/p>\n<p>Maintenant, si, comme moi, vous devez (\u00e0 l&rsquo;arrache) tripoter vos GPOs pour que \u00e7a refonctionne, voici un script PowerShell qui fait en sorte que ca fonctionne..<\/p>\n<p>Si vous n&rsquo;enlevez pas les commentaires, vous n&rsquo;aurez qu&rsquo;un audit&#8230;<\/p>\n<p><code><br \/>\n$AuthenticatedUsers_NAME='Utilisateurs authentifi\u00e9s'<br \/>\n$DomainComputers_NAME='Domain Computers'<\/p>\n<p>foreach ($GPO in Get-GPO -All | sort displayname){<br \/>\n  $permissions=Get-GPPermissions -Guid $GPO.Id -All<\/p>\n<p>  if ($GPO.user.Enabled -and $GPO.computer.Enabled ){<br \/>\n    Write-Host $gpo.DisplayName \"`t`t`t`tDOUBLE SECURITY :: Please, check !\" -foregroundcolor cyan<br \/>\n  }<\/p>\n<p>  if ($GPO.user.Enabled ){<br \/>\n    Write-Host -nonewline $gpo.DisplayName USER<br \/>\n    $permission=($permissions | where { $_.trustee.name -eq $AuthenticatedUsers_NAME } ).permission<br \/>\n    if ($permission -eq 'GpoApply' -or $permission -eq 'GpoRead') {<br \/>\n      Write-Host \" : $permission\" -foregroundcolor green<br \/>\n    } else {<br \/>\n      Write-Host \"`t-- Missing USER permission --\" -foregroundcolor RED<br \/>\n#      Set-GPPermissions -Guid $GPO.Id -TargetName $AuthenticatedUsers_NAME -TargetType group -PermissionLevel GpoRead | out-null<br \/>\n    }<br \/>\n  }<\/p>\n<p>  if ($GPO.computer.Enabled ){<br \/>\n    Write-Host -nonewline $gpo.DisplayName COMPUTER<br \/>\n    $permission=($permissions | where { $_.trustee.name -eq $DomainComputers_NAME } ).permission<br \/>\n    if ($permission -eq 'GpoApply' -or $permission -eq 'GpoRead') {<br \/>\n      Write-Host \" : $permission\" -foregroundcolor green<br \/>\n    } else {<br \/>\n      Write-Host \"`t-- Missing COMPUTER permission --\" -foregroundcolor RED<br \/>\n#      Set-GPPermissions -Guid $GPO.Id -TargetName $DomainComputers_NAME -TargetType group -PermissionLevel GpoRead | out-null<\/p>\n<p>    }<br \/>\n  }<br \/>\n}<br \/>\n<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft a chang\u00e9 sa m\u00e9thode pour le rapatriement des GPO. Je vous passe les d\u00e9tails. Si vous voulez en savoir plus : https:\/\/support.microsoft.com\/en-us\/kb\/3163622 Maintenant, si, comme moi, vous devez (\u00e0 l&rsquo;arrache) tripoter vos GPOs pour que \u00e7a refonctionne, voici un script PowerShell qui fait en sorte que ca fonctionne.. Si vous n&rsquo;enlevez pas les commentaires, [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-451","post","type-post","status-publish","format-standard","hentry","category-non-classe"],"_links":{"self":[{"href":"https:\/\/snakenet.eu\/blog\/wp-json\/wp\/v2\/posts\/451","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/snakenet.eu\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/snakenet.eu\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/snakenet.eu\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/snakenet.eu\/blog\/wp-json\/wp\/v2\/comments?post=451"}],"version-history":[{"count":4,"href":"https:\/\/snakenet.eu\/blog\/wp-json\/wp\/v2\/posts\/451\/revisions"}],"predecessor-version":[{"id":455,"href":"https:\/\/snakenet.eu\/blog\/wp-json\/wp\/v2\/posts\/451\/revisions\/455"}],"wp:attachment":[{"href":"https:\/\/snakenet.eu\/blog\/wp-json\/wp\/v2\/media?parent=451"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/snakenet.eu\/blog\/wp-json\/wp\/v2\/categories?post=451"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/snakenet.eu\/blog\/wp-json\/wp\/v2\/tags?post=451"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}