Computer aus dem GPO Security Filtering in eine Sicherheitsgruppe (Members) kopieren

# Jörn Walter www.der-windows-papst.de

$GPO = “WSUS Clients”
$Compis = Get-GPPermission -Name $GPO -TargetType Computer -all | ?{$_.Trustee.SidType -eq ‘Computer’}

foreach ($Compi in $Compis) {

$Obj = New-Object -TypeName PSObject -Property @{

GPOName = $GPO
AccountName = $($Compi.Trustee.Name)
AccountType = $($Compi.Trustee.SidType.ToString())
Permissions = $($Compi.Permission)
}
$Obj | Select GPOName,AccountName,AccountType,Permissions
Add-ADGroupMember “GP-Carbon-Black” -Members $Compi.Trustee.Name
}