Disable, delete or purge: what your offboarding script can actually undo
Disabling an account is easy to reverse. Deleting one gives you 30 days, sometimes. Purging gives you nothing.
· 2 min read
blog
Blog
Notes on running scripts in production: what goes wrong, how far a change reaches, and how to check before you press Enter.
-WhatIf is not a dry run for everything
-WhatIf only previews commands that support it. The rest of your script runs for real.
· 2 min read
Execution policy is not a security boundary. Microsoft says so.
RemoteSigned stops accidents, not bad scripts. The review still has to happen before you unblock.
· 2 min read
DELETE without a WHERE clause, delivered by PowerShell
Invoke-Sqlcmd runs whatever T-SQL you hand it. A missing WHERE clause turns "remove one row" into "empty the table".
· 2 min read
The script is going to 500 endpoints. Read it first.
Scripts from vendors, forums and RMM libraries get pushed widely and reviewed rarely. A ten-minute routine changes that.
· 2 min read
How to read a ScriptPreflight report in 60 seconds
One result, three answers and one honest box about what we couldn't check. Here's what each part means.
· 2 min read
AI agents now run scripts in production. The review step is missing.
Three incidents in sixteen months show the same gap: code gets written and run with nobody reading it in between.
· 3 min read
The one-liner that restarts every computer in your domain
You meant three web servers. Get-ADComputer -Filter * meant every computer account in Active Directory.
· 2 min read
What the AWS, Azure and Cloudflare outages teach every admin who writes scripts
Three of the biggest outages of late 2025 came from automation doing exactly what it was told. The lessons scale down to your PowerShell.
· 2 min read
Five PowerShell patterns that do far more than they look
Most script outages don't start with a bad idea. They start with one parameter nobody looked at twice.
· 2 min read