Download to read offline
Uploaded byVictor Silva
Just Enough Administration: Introduction - PowerShell Meetup UY
This document provides an introduction to Just Enough Administration (JEA), a PowerShell security technology that provides role-based access control for anything managed with PowerShell. It discusses determining which commands to allow, defining limits, integration with PowerShell Desired State Configuration, how JEA works by building on PowerShell remoting, and creating a role capability file to define what users can see and do. The document also asks if there is a GUI and provides a link for more information and demo instructions.
Just Enough Administration: Introduction - PowerShell Meetup UY
- 1.
- 2.
- 3.
- 4. Just Enough Administration(JEA) is a PowerShell security technology that provides a role based access control platform for anything that can be managed with PowerShell.
- 5. Better understand whatyour users are doing Limit what users can do Reduce the number of administrators on your machines
- 6. INSTALL Server Operating SystemJEA Availability Windows Server 2016 Preinstalled Windows Server 2012 R2 Full functionality with WMF 5.1 Windows Server 2012 Full functionality with WMF 5.1 Windows Server 2008 R2 Reduced functionality with WMF 5.1
- 7. DETERMINE WHICH COMMANDSTO ALLOW • Identify the commands • Update use of PowerShell • Restrict the scope • Create custom functions • Test :)
- 8.
- 9. INTEGRATION • PowerShell DSC(Desire State Configuration)
- 10. HOW TO WORK? •PowerShell Remoting provides the foundation on which JEA is built. Conclusion: Run Enable-PSRemoting • Optional: Enable PowerShell module and script block logging
- 11.
- 12. CREATE A ROLECAPABILITY FILE New-PSRoleCapabilityFile -Path .MyFirstJEARole.psrc VisibleCmdlets = 'Restart-Computer', 'Get- NetIPAddress' VisibleExternalCommands = 'C:WindowsSystem32whoami.exe', 'C:Program FilesContosoScriptsUpdateITSoftware.ps1'
- 13. …IS THERE AGUI?
- 14.
- 15. DEMO Utilizar Azure CloudShell Generar un playbook Administrar recursos en Azure
- 16. Thanks! You can findme at: @vmsilvamolina / blog.victorsilva.com.uy Any questions?