Mastering Active Directory - Second Edition

JEA

JEA was first released in 2014, and it was the first approach toward JIT administration. JEA allows you to provide role-based privileges instead of full administrative privileges. As an example, the Rebeladmin Corp. IT team runs a set of PowerShell scripts every month to generate reports about the monthly resource usage of its private cloud. In order to do that, a member of the IT team logs in to a server monthly and runs these scripts. The individuals who run these reports are Domain Admins, as they need to have administrative privileges to do so. But these users do not need Domain Admin privileges for their day-to-day helpdesk tasks. Using JEA, we can assign just enough privileges to run these scripts from specific hosts instead of ...