HGPM v0.2.0

The first release out of alpha: Install-PSResource -Name HGPM installs it, without -Prerelease.

Added

• Group Policy Modeling, Results and Update, as GPMC: Get-PSGPOModeling (the GPOs a computer and a user would apply, from the directory: the links of the site, the domain and the OUs in the order Windows applies them, the token of the account with its nested groups or a container with its groups, MS16-072, WMI filters assumed true but those given false, empty parts, loopback Merge and Replace, each GPO denied with its reason), Get-PSGPOResult (gpresult /x on Windows, samba-gpupdate --rsop on Linux as root, or their file), Invoke-PSGPOUpdate (gpupdate, Invoke-GPUpdate of RSAT on other computers, samba-gpupdate); the modeling checked against the result on a Windows member and a Samba domain controller
• Starter GPOs, as GPMC: Starter GPOs under the domain (System and Custom, read from SYSVOL\<domain>\StarterGPOs when their node is selected), New Starter GPO... (empty, or with the Administrative Templates of a GPO), New GPO from Starter GPO... and Start from of the New GPO form, Delete Starter GPO...; Get-PSGPOStarterGpo, New-PSGPOStarterGpo, Remove-PSGPOStarterGpo, New-PSGPO -StarterGpo; the files and the extensions GPMC writes, checked on a Windows domain (GPMC reads the Starter GPOs of HGPM and the reverse); audit events 1013 and 1014
• The sites of the forest, as GPMC: Sites beside the domain in the console, each site with its links, read only (their links are changed with GPMC); the links of a GPO include its sites, Find-PSGPO -LinkedTo takes a site and counts a link to a site as a link, Get-PSGPODirectory reads them (Sites), Import-PSGPODirectory takes sites; deleting a GPO linked to a site says that the link stays
• Copy a GPO, as Copy and Paste of GPMC: Copy... (the context menu of a GPO and of a link to it) and Copy-PSGPO, a new GPO of the domain with the files of its folder (settings, comment), its status, client-side extensions and WMI filter, not its links; the permissions of a new GPO, or those of the GPO (-CopyAcl, Preserve the existing permissions), the denied and custom ones said; the copy of a creator of the approval workflow waits for its approval
• Search the GPOs, as the Search of GPMC: Search... (the context menu of the domain and of Group Policy Objects, Ctrl+F) and Find-PSGPO, by name, links (linked nowhere included), WMI filter, permission of an account or a group, client-side extension, text of the settings, status, approval and comment; every criterion given must match, the GPOs read in the background, the results kept while one of them is shown in the tree
• The comment of a GPO, as GPMC (GPO.cmt of its folder, UTF-16): in its details in the console, saved by an account that edits it, without changing its version; Set-PSGPO -Comment, New-PSGPO -Comment, in the report of the GPO, and in the audit log (SetGpoComment, event 1012)
• About in the launcher (Start-HGPM): the version of HGPM installed and the folder it runs from, PowerShell and the system, links to the documentation, the source code and hardenad.net: HGPM is a product of the Hardenad community

Fixed

• The ACL HGPM writes on the SYSVOL folder of a GPO follows the version of Samba of the domain controller, as its samba-tool gpo aclcheck derives it (Samba bug 14927): Windows and Samba 4.23 and later, the allow and deny ACEs without the object ones (Apply Group Policy), Samba 4.17 to 4.22 as before, Samba 4.16 and before the allow ACEs; Get-PSGPODirectory reads the version (ServerVersion, the vendorVersion of the rootDSE). With Samba 4.23, aclcheck said the GPOs whose permissions HGPM had changed were inconsistent

Changed

• The long operations of the GPO console run in the background: Refresh (F5) and Change Domain Controller..., Detect Now (Status tab), Back up and Back up all (History tab), Save report.... The window stays drawn and answers, a banner says what runs, the tree and the details of the domain wait meanwhile, and Cancel stops a read (not a backup, which writes)
• An error that a handler of a window does not catch no longer closes the window: every console says it in a notification at the top right and stays open, and the technical log has it, with the script and the line where it happened (the same error again within 5 seconds is said once)
• The GPO console is split by view, a file each (Initialize-PSGPOManager*View), and its controls are made from its XAML in one loop instead of a line each; a test reads its code and fails on a variable that is neither assigned nor a control of the window