Cookies on ScriptPreflight

We use strictly necessary storage to sign you in, take payments and keep the site secure. With your permission we also count visits, without cookies, to see which pages help. We don't run marketing tags. Cookie policy

Use case · Active Directory

Bulk AD changes, without the domain-wide surprise.

Users, groups, computers, OUs and GPOs, with the filter and search base checked against what you meant.

Run a free preflightSee a sample report

No card required. Your script is never executed.

Three patterns we flag

  • Disables every account that matches an empty filter

    Get-ADUser -Filter * -SearchBase $ou | Disable-ADAccount

  • Removes members from a privileged group

    Get-ADGroupMember "Domain Admins" | Remove-ADGroupMember -Identity "Domain Admins" -Confirm:$false

  • Deletes computer objects with no age check

    Get-ADComputer -Filter * | Remove-ADComputer -Confirm:$false

Sample: restart-servers.ps1

Real pattern, synthetic script. Unfiltered tenant-wide target.

Try this sample in the free checker

What we check

  • Empty or wildcard filters and search bases
  • Privileged group changes
  • Object deletion without the Recycle Bin
  • -Confirm:$false on destructive cmdlets

What we can't know

  • · How many objects match in your environment when it runs
  • · The current state of your environment
  • · Which permissions the account running it actually holds

The script is never run and we never connect to your environment, so every report states what it could not determine.

Check the next script before it runs.

Run a free preflightSee a sample report