Implement JIT and JEA Administration in Windows Server 2019
Course info
Course info
Description
The modern Windows network has issues with locking down security. In this course, Implement JIT and JEA Administration in Windows Server 2019, you’ll learn how to create an environment to protect administrative access to only authorized users and only when they need it and will learn about two different ways to accomplish this secure goal. First, you’ll learn about Just Enough Administration. This includes creating configuration and capability files to configure the JEA environment. Next, you’ll explore Just In Time administration. This type of security involves separating administrative access using bastion forests and domains. Finally, you’ll configure a bastion forest and create the necessary links and trusts to work between this forest and your production forest. You’ll learn this by utilizing shadow principles using Microsoft Identity Manager. By the end of this course, you'll be able to secure your on-premise or cloud environment more completely with JEA and JIT.
About the author
Professor Robert McMillen (MCT, MCSE) has over 20 years of experience in IT Consulting. He teaches at two local colleges and hosts the weekly All Tech Radio show in the Portland area.
More from the author
Section Introduction Transcripts
Course Overview
Hello. My name is Robert McMillen. I would like to welcome you to my course, Implement Just‑In‑Time and Just‑Enough‑Administration in Windows Server 2019. I'm a Microsoft certified trainer, consultant, and college instructor. In this course, we will discover how to set up and implement a just‑enough administration configuration, as well as a just‑in‑time scenario. You'll witness how just‑enough administration is configured solely in PowerShell and used by standard users who are elevated to become temporary Active Directory‑limited administrators. In a similar way, you'll also see how just‑in‑time administration is configured and utilized to perform admin tasks by temporary administrators to limit how many and how long users are able to configure the domain with administrator rights. You'll learn how to set up a Microsoft Identity Management Server, configure privileged access management, and use SharePoint to help you perform many of the tasks needed to administer a just‑in‑time administration environment. You'll also learn how to do this with Microsoft Azure using the portal. The same results happen in the cloud as they do on premises, but the implementation is much different. By the end of this course, you'll be able to secure your on‑premises or cloud environment more completely with just‑enough administration and just‑in‑time administration. I hope you'll join me in learning these great technologies Microsoft has to offer in my course, Implement Just‑In‑Time and Just‑Enough Administration in Windows Server 2019.