Import-MSFTSecurityBaseline.ps1

param (
    [String]$GpoBackupFolder = "E:\Sources\Security Baseline\Windows-10-RS4-Security-Baseline-FINAL\GPOs",
    [String]$DomainName = "decline.lab",
    [String]$PilotOU = "OU=Security Baseline 1803,OU=Workstations,DC=decline,DC=lab"
)

function Get-GpoNameFromReport {
    param (
        [Parameter(Mandatory)]
        [String]$GpoReportPath
    )

    $reportXml = $GpoReportPath
    $xmlDoc = [System.Xml.XmlDocument]::new()
    $xmlDoc.Load($reportXml)

    $gpoName = $xmlDoc.GPO.Name

    return $gpoName
}

$gpoArr = Get-ChildItem $GpoBackupFolder -Directory

foreach ($gpoExport in $gpoArr) {
    $reportXmlFile = Get-ChildItem -Path $gpoExport.FullName -Filter "gpreport.xml"
    $gpoName = Get-GpoNameFromReport -GpoReportPath $reportXmlFile.FullName
    
    $newGpoObject = New-GPO -Name $gpoName -Domain $domainName -Comment "Imported from $GpoBackupFolder on $(Get-Date -Format yyyyMMdd) by $env:USERNAME"
    Import-GPO -Path $GpoBackupFolder -TargetName $gpoName -Domain $DomainName -BackupId $gpoExport.Name

    if ($PilotOU) {
        New-GPLink -Guid $newGpoObject.id -Target $PilotOU -LinkEnabled Yes -Domain $DomainName
    }
}