Remove Default Computer OU from Group Policy Organization Units Report about gpozaurr HOT 4 CLOSED

There is a reason why there are exclusions in place. It may or may not be what you want in output.

$OUs = Get-GPOZaurrOrganizationalUnit
$Ous | Format-Table

Get-GPOZaurrOrganizationalUnit -Verbose -Option Unlink -Exclusions @(
   'OU=Groups,OU=Production,DC=ad,DC=evotec,DC=pl'
) | Format-Table

Get-GPOZaurrOrganizationalUnit -Verbose -ExcludeOrganizationalUnit @(
   '*,OU=Production,DC=ad,DC=evotec,DC=pl'
) | Format-Table

Invoke-GPOZaurr -Type GPOOrganizationalUnit -Online -FilePath $PSScriptRoot\Reports\GPOZaurrOU.html -Exclusions @(
   '*OU=Production,DC=ad,DC=evotec,DC=pl'
   '*OU=Accounts,OU=Administration,DC=ad,DC=evotec,DC=xyz'
)

I guess I could mark that OU excluded by default.

As for the 2nd problem - are you sure? The GPOList report doesn't check if there are computers/users in the OU. It checks only for links, and it does this forest-wide. It doesn't care if it's empty OU or not. Maybe it's linked but the link is not enabled, which we treat as non-working.

Works fine for me:

Test-GPO-3, Test-GPO-4 are linked, but link disabled. Test-GPO-1, and Test-GPO2 are linked and link enabled.

from gpozaurr.

On the second issue, sorry, yes you are correct. The link was disabled. Apologies as we almost never disable, just unlink.

As for the original issue, I didn't realize exclusions were possible. However, after reviewing the documentation in the Docs directory, I'm not clear on what all excluding an OU does.

My suggestion is merely, by default, to not consider it a problem in the "Group Policy Organizational Units" report that there is an empty OU with GPOs as long as it is the default OU for new computers joining the domain.

from gpozaurr.

Ye, i'll add it for both computers and users, as this is a common scenario for both. Docs is built on comment based help. Most of the effort is put into the HTML or to examples.

In case of adding an exclusion the report marks the Status column as Excluded.

Basically a summary changes, HTML table shows this, and also "fix" code shows up those exclusions to be used if someone would like to unlink those GPOs.

from gpozaurr.

Now that I think on excluding by default redirected OU's... it's a question what should be excluded. Direct OU, or subou's as well. Depending on how someone organized their OU's i guess the safest bet is to just exclude the redirected OU and leave others as they were for subject to deletion or manual exclusion.

from gpozaurr.