Computer Objekte aus dem GPO Security Filtering löschen

# Jörn Walter https://www.windows-papst.de
$GPO = “WSUS Clients”
$Compis = Get-GPPermission -Name $GPO -TargetType Computer -all | ?{$_.Trustee.SidType -eq ‘Computer’}

foreach ($Compi in $Compis) {

$Obj = New-Object -TypeName PSObject -Property @{

GPOName = $GPO
AccountName = $($Compi.Trustee.Name)
AccountType = $($Compi.Trustee.SidType.ToString())
Permissions = $($Compi.Permission)
}
$Obj | Select AccountName,AccountType,Permissions

Set-GPPermission -Name “$GPO” -TargetName $Compi.Trustee.Name -PermissionLevel None -TargetType Computer -Verbose

}