Using 'Get-GPInheritance' Command in Powershell 7

Question

Using the 'Get-GPInheritance' command in Powershell 7 returns the GPOLink class rather than the GPO name for each GPO listed in the 'InheritedGpoLinks' property.

Get-GPInheritance -Target $ou | Select-ExpandProperty InheritedGpoLinks | FT

But the same command outputs the GPO names successfully in Windows PowerShell 5.1.

How can I get this to work in Powershell 7?

lainrobertson · Answer

Henrik_Andre_Olsen&nbsp;&nbsp;I'm not a habitual PowerShell (as distinct from Windows PowerShell) user, but working with the Get-GPInheritance commandlet in this thread:&nbsp;I can replicate the listed issue when using:Import-Module -Name GroupPolicy;The commandlet returns the expected result when having used:Import-Module -Name GroupPolicy -SkipEditionCheck&nbsp;It's worth noting that - at least under my now out-of-date PowerShell 7.2.6 - it provides a warning message upon loading this module that it's using the compatibility process described in the documentation:&nbsp;about Windows PowerShell Compatibility - PowerShell | Microsoft Learn&nbsp;This may or may not having been around back when this post was created - I have no idea (as I don't use PowerShell.)&nbsp;I should add that this is assuming you're on Windows (I'm not sure if the GroupPolicy module exists for other platforms), and I fully recognise that testing this one specific scenario is a very long way from being comprehensive.&nbsp;That disclaimer out of the way, when running the same type check against&nbsp;InheritedGpoLinks (having used -SkipEditionCheck) - in line with the previous posts, it confirms the module is running in-process, meaning serialisation and de-serialisation are no longer an issue.&nbsp;&nbsp;&nbsp;Cheers,Lain

henrik_andre_olsen · Answer

Yes - it's either that, or run your entire PowerShell script in version 5.1 (Windows Powershell).Thank you for mentioning the PowerShell compatibility mode 🙂

henrik_andre_olsen · Answer

mmseng&nbsp;No it's a bug:https://github.com/PowerShell/PowerShell/issues/18519

farismalaeb · Answer

bobstertech&nbsp;mmm.I am checking the issue and notice that there are a lot of different between running the command on Powershell 5.1 (Infrastructure version) vs Powershell 7even the object type and the return is different,&nbsp;Powershell 5.1, Notice that the name is GPOLink, which seems to be an object holding the value&nbsp;&nbsp;PS C:\Users\Administrator&gt; ((Get-GPInheritance -Target $ou ).InheritedGpoLinks)[0].gettype()

IsPublic IsSerial Name                                     BaseType
-------- -------- ----                                     --------
True     False    GpoLink                                  System.Object&nbsp;&nbsp;Powershell 7.1, Notice that the Value type is String not GPOLink&nbsp;PS C:\Program Files\PowerShell\7&gt; ((Get-GPInheritance -Target $ou ).InheritedGpoLinks)[0].gettype()

IsPublic IsSerial Name                                     BaseType
-------- -------- ----                                     --------
True     True     String                                   System.Object&nbsp;&nbsp;Even when you run&nbsp;Get-GPInheritance -Target $ou&nbsp;Powershell 5.1:&nbsp;will return the GPNmaePowershell 7.1: will return&nbsp;Microsoft.GroupPolicy.GpoLinkI will do more checks on this, this is maybe because the GroupPolicy module was written and tested in PS5.1 but not 7&nbsp;

bobstertech · Answer

farismalaeb&nbsp;Interesting. Thanks for looking into this.

Forum Discussion

Using 'Get-GPInheritance' Command in Powershell 7

8 Replies

Resources