Mastering Active Directory

Just enough administration

JEA was first introduced in 2014, and it was the first approach toward the JIT. JEA allows you to provide role-based privileges instead of full administrative privileges. As an example, the Rebeladmin Corp. IT team monthly runs a set of PowerShell scripts to generate reports for the monthly resource usage of its private cloud. A member of the IT team logs into a server monthly and runs these scripts. The individuals who run these reports are Domain Admins as they need administrative privileges. These users do not need Domain Admin privileges for their day-to-day helpdesk tasks. Using JEA, we can assign just enough privileges to run these scripts from specific hosts instead of providing Domain Admin privileges. This ...