Sysvol-GPOCheck

# Import the Group Policy module
Import-Module GroupPolicy

# Get all the Group Policy Objects (GPOs)
$GPOs = Get-GPO -All

# Initialize an array to store GPOs with File System security settings
$GPOsWithSysvolPermissions = @()

# Loop through each GPO and check for File System security settings affecting SYSVOL
foreach ($GPO in $GPOs) {
    $Report = Get-GPOReport -Guid $GPO.Id -ReportType XML
    [xml]$GPOReport = $Report
    $FileSystemSettings = $GPOReport.GPO.Computer.FileSystem.File

    foreach ($FileSetting in $FileSystemSettings) {
        if ($FileSetting.Path -like "*SYSVOL*") {
            $GPOInfo = New-Object PSObject -Property @{
                GPOName = $GPO.DisplayName
                GPOGUID = $GPO.Id
                FilePath = $FileSetting.Path
                Permissions = $FileSetting.SecurityDescriptor
            }
            $GPOsWithSysvolPermissions += $GPOInfo
        }
    }
}

# Display the GPOs with SYSVOL permissions
$GPOsWithSysvolPermissions | Format-Table -AutoSize