Skip to main content
Version: 2.3.0

AD-GPOS-09 - GPO owner details should be accessible

Michael Soule
Contributed by Michael SouleAll contributors →

Overview​

Test-MtAdGpoOwnerDetails​

Returns details of GPO owners, including how many GPOs each owner has.

Why This Test Matters​

  • Operational value: summarizes GPO owners and how many GPOs each owner has, revealing ownership distribution.

Control Type​

Operational

Security Recommendation​

  • Ensure ownership aligns with policy and stewardship; adjust ownership for orphaned or unclear GPOs.

How the Test Works​

  • Retrieves GPO state, groups GPOs by Owner, and renders a table with owner and GPO counts.
  • Test-MtAdGpoOwnerDistinctCount.

Test Metadata​

FieldValue
Test IDAD-GPOS-09
SeverityInfo
SuiteActive Directory
CategoryAD.GPOState
PowerShell testTest-MtAdGpoOwnerDetails
TagsAD, AD-GPOS-09, AD.GPOState

Source​

  • Pester test: tests/ad/gpostate/Test-MtAdGpoOwnerDetails.Tests.ps1
  • PowerShell source: powershell/public/ad/gpostate/Test-MtAdGpoOwnerDetails.ps1