$domain = 'cascades.local'
$gpoName = 'CSC - Folder Redirection'
$gpoGuid = '{512B43A4-F049-4CE5-BFAC-860AD13E92BE}'

Import-Module ActiveDirectory -EA SilentlyContinue
Import-Module GroupPolicy -EA SilentlyContinue

# Suppress all ShouldProcess confirmations
$ConfirmPreference = 'None'

# Try Set-GPPermission with ConfirmPreference suppressed
try {
    Set-GPPermission -Name $gpoName -Domain $domain `
        -PermissionLevel None -TargetName 'Authenticated Users' -TargetType Group -EA Stop
    Write-Output "[OK] Removed via Set-GPPermission"
} catch {
    Write-Output "[WARN] Set-GPPermission failed: $($_.Exception.Message)"

    # Fallback: GPMC COM object
    try {
        $gpm = New-Object -ComObject GPMgmt.GPM
        $constants = $gpm.GetConstants()
        $gpmDomain = $gpm.GetDomain($domain, '', $constants.UseAnyDC)
        $gpo = $gpmDomain.GetGPO($gpoGuid)
        $secInfo = $gpo.GetSecurityInfo()
        $newSec = $gpm.CreateSecurityInfo()
        for ($i = 0; $i -lt $secInfo.Count; $i++) {
            $perm = $secInfo.Item($i)
            if ($perm.Trustee.TrusteeName -ne 'Authenticated Users') {
                $newSec.Add($perm)
            }
        }
        $gpo.SetSecurityInfo($newSec)
        Write-Output "[OK] Removed via GPMC COM"
    } catch {
        Write-Output "[ERROR] COM approach: $($_.Exception.Message)"
    }
}

Write-Output ""
Write-Output "=== GPO Security Filter (final) ==="
Get-GPPermission -Name $gpoName -Domain $domain -All | ForEach-Object {
    Write-Output "  $($_.Trustee.Name) [$($_.Trustee.TrusteeType)] — $($_.Permission)"
}