if ((Get-WindowsFeature -Name AD-Domain-Services).Installed) Write-Error "This is a Domain Controller. OffScrub aborted." exit 1
Write-Host "Starting Production OffScrub - $(Get-Date)" setup prod offscrub
Write-Host "OffScrub completed - $(Get-Date)" In production, you need rollback capability and exclusion logic . A. Create an undo script Before disabling anything, export current state: if ((Get-WindowsFeature -Name AD-Domain-Services)
Get-Service | Where-Object $_.StartType -eq "Disabled" | Export-Clixml -Path "C:\OffScrubBackup\services_before.xml" Restore script: setup prod offscrub