About Show #471
How much administration do you need? Richard chats with Tech Fellow and Father-of-PowerShell Jeffrey Snover about Just Enough Administration (JEA). The goal of JEA is to get administrators to stop living in admin accounts, to operate day-to-day with regular domain accounts and only escalate up to admin for a specific task, typically written in PowerShell. Jeffrey talks about creating a "break glass in emergency" account that is the superadmin, only to be used when there's no other way to do something. This account should be heavily logged and scrutinized, so that root cause analysis can extract the needs for the event and create more automation and security granularity around it. JEA works on Server 2008R2 and above, and will be built into Server 2016!
Jeffrey Snover is a Technical Fellow and the Lead Architect for the Enterprise Cloud Group. Snover is the inventor of Windows PowerShell, an object-based distributed automation engine, scripting language, and command line shell. Snover joined Microsoft in 1999 as divisional architect for the Management and Services Division, providing technical direction across Microsoft’s management technologies and products. Snover has over 32 years of industry experience with a focus on management technologies and solutions. He was an architect in the office of the CTO at Tivoli and a development manager at NetView. He has worked also as a consulting engineer and development manager at DEC, where he led various network and systems management projects. Snover held 8 patents prior to joining Microsoft, and has registered 30 patents since.