Implement Just-Enough-Administration(JEA) || Just Enough Administration (JEA) With PowerShell
In this video we will learn Implement Just-Enough-Administration(JEA), The main purpose of PowerShell JEA is to limit privileges. JEA allows you to grant non-admin users permissions to perform specific administrative tasks without giving them server or service administrator rights
#PowerShell #JEA #Remoting
Configurations and scripts that has been used is as below :
New-PSSessionConfigurationFile -Path 'C:\Program Files\WindowsPowerShell\printspooler.pssc'
New-Item -Path 'C:\Program Files\WindowsPowerShell\Modules\JEA\RoleCapabilities' -ItemType Directory
New-PSRoleCapabilityFile -Path 'C:\Program Files\WindowsPowerShell\Modules\JEA\RoleCapabilities\rolecap.psrc'
VisibleCmdlets = @{ Name = 'Restart-service';
Parameters = @{ Name = 'name'; validateset = 'spooler'}}
VisibleExternalCommands = 'c:\windows\system32\whoami.exe'
Register-PSSessionConfiguration –Name testHelpDesk -Path 'C:\Program Files\WindowsPowerShell\printspooler.pssc'
Restart-Service WinRM
Get-PSSessionConfiguration|ft name
Enter-PSSession -ComputerName dc -ConfigurationName testhelpdesk -credential tareenan\helpdesk