A post-Snowden world calls for post-Snowden administration tools. Enter the Just Enough Administration (JEA) toolkit. JEA is a tool that lets you grant any user administrative power on a server, but does so in a way that gives the user precisely the amount of control and power that they need to do their job - and no more. In this Play by Play, Mark Minasi sits down with Microsoft Distinguished Engineer and PowerShell creator, Jeffrey Snover, to learn why we need the JEA toolkit, how to use it, and where future versions will go.
How many users have full administrator access to your Windows network? In a post-Snowden world, we need a new way to grant permissions. The new principles of network configuration are Just-in Time (JIT) and Just Enough Administration (JEA): giving users the necessary rights and privileges to do their jobs, but limiting their power to only what they need. Obviously creating groups and policies to execute this kind of fine-grained control would be burdensome. The JEA toolkit promises a much easier way to accomplish this. JEA is a PowerShell toolkit that creates special sessions to grant User Accounts "run-as-administrator" permissions on commands, properties and settings they need to manage network resources. In this Play by Play, PowerShell creator and Microsoft Distinguished Engineer, Jeffrey Snover, shows off the features of the JEA remote access architecture.
Jeffrey Snover is a Distinguished Engineer Microsoft and the Lead Architect for the Windows Server and System Center Division. Snover is the inventor of Windows PowerShell, an object-based distributed automation engine, scripting language, and command line shell. Snover joined Microsoft in 1999 as divisional architect for the Management and Services Division, providing technical direction across Microsoft's management technologies and products. Snover has over 30 years of industry experience with a focus on management technologies and solutions. He was an architect in the office of the CTO at Tivoli and a development manager at NetView. He has worked also as a consulting engineer and development manager at DEC, where he led various network and systems management projects. Snover held 8 patents prior to joining Microsoft, and has registered over 30 patents since. He is a frequent speaker at industry and research conferences on a variety of management and language topics.