Mastering Active Directory - Second Edition

JEA

In the previous chapter, I explained how JEA can work in an infrastructure to secure the privileges associated with domain accounts. In a nutshell, we can create JEA endpoints and assign them to roles. Users do not need to have permissions such as domain admin or enterprise admin to run these. Users can use these endpoints with their regular AD user accounts. However, in the backend JEA, commands are executed using a JEA local administrator account. These login details need not be known by end users, and their passwords are reset automatically on a daily basis.

As promised in the previous chapter, let's now look at how to get JEA installed and configured.

In order to install JEA, first log in to the server from a user that has local administrator ...