Skip to main content
Version: 2.3.0

AD-GPOS-01 - GPO state total count should be retrievable

Michael Soule
Contributed by Michael SouleAll contributors →

Overview​

Test-MtAdGpoStateTotalCount​

Counts the total number of Group Policy Objects (GPOs) returned by Get-MtADGpoState.

Why This Test Matters​

  • Operational control: provides a quick overview of the total GPOs present in the AD state to gauge scope.

Control Type​

Operational

Security Recommendation​

  • Use as a baseline metric; no remediation required unless counts look unexpectedly abnormal.

How the Test Works​

  • Calls Get-MtADGpoState, counts non-null GPOs in the GPOs collection, and reports a Markdown table with a single Total GPOs value.
  • Test-MtAdGpoStateTotalCount is the primary reference.

Test Metadata​

FieldValue
Test IDAD-GPOS-01
SeverityInfo
SuiteActive Directory
CategoryAD.GPOState
PowerShell testTest-MtAdGpoStateTotalCount
TagsAD, AD-GPOS-01, AD.GPOState

Source​

  • Pester test: tests/ad/gpostate/Test-MtAdGpoStateTotalCount.Tests.ps1
  • PowerShell source: powershell/public/ad/gpostate/Test-MtAdGpoStateTotalCount.ps1