Just Enough Explanation of JEA, Windows' New "Just Enough Administration" (JEA) Tool

NTK 2015
Stopnja 300
Datum torek
19. maj 2015 16:15

Most of us who've run networks for more than about two days have learned "the principle of least privilege," a short way of saying, "when you create an account to administer service 'X' (Exchange, SQL, a file server, SharePoint or whatever), don't create that account as a domain administrator, create it with only the privileges and permissions that it needs… no more." It's a wise intention, but a hard one to follow in the Windows world. But that's changing. PowerShell mastermind Jeffrey Snover's team recently released an experimental toolkit they call JEA, short for ""Just Enough Administration."" Aimed for implementation on servers from 2008R2 and later, JEA lets you create custom-made administrative accounts with finely-tuned, purpose-built capabilities. Even better, you set this stuff up from a central location with Desired State Configuration, Windows' relatively new group-policy-for-servers-but-even-better tool. (And of course, anyone using a JEA endpoint is logged from start to finish.) Securing modern server management seeks to isolate, restricts and tracks administration tasks in a role-based fashion. Third party tools or hundreds of hours of scripting might accomplish that… but why waste that time and money? Attend this session with Windows automation guru Mark Minasi and understand JEA's pieces, see how to set it up and customize it for your needs. See you there!

Mark Minasi is a best-selling author, popular technology columnist, commentator, keynote speaker, and IT consultant. He first got the chance to play with a computer at a university class in 1973. At that time, he learned two things: •First, computers are neat. (People still said "neat" back in 1973. Hey, it was back in the 20th Century.) •Second, many technical people are very nice folks, but they can sure put you to sleep in an instant while explaining technical things. Mark transformed those two insights into a career making computers and networking easier and more fun to understand. He's done that by writing over a thousand computer columns, several dozen best-selling technical books, and explaining operating system and networking planning, installation, maintenance and repair to crowds from two to two thousand. An independent voice hailed as "Favorite Technical Author" by CertCities four times out of four, Mark has the unusual ability to take even the most technical topics, filter out the hype and explain them in plain English. Perhaps that's why when TechTarget hired him to deliver a webcast on PC tuning, he drew three times as many attendees as any of their previous webcasts, crashing Yahoo's servers, and why he's been hired to deliver keynote addresses at hundreds of techie conferences around the world. Mark is probably best known for his Mastering Windows Server and Complete PC Upgrade and Maintenance Guide books, both of which have seen more than 12 editions and sold over a million copies. An audience member at a recent talk remarked that he believed that Mark could "do a talk on watching paint dry that would be so good that people would be motivated to go home and paint a wall just to experience the joy of drying paint." While this has led to many very tempting offers from the likes of Sherwin-Williams and Behr, he's decided to stay with his first love... technology. Mark's humorous, provocative and yet informative style makes him a favorite of audiences around the world. Mark's firm, MR&D, is based in Pungo, a town in Virginia's Tidewater area which is distinguished by having one and only one traffic light.