Just Enough Admin and Windows Server 2016 with Jeffrey Snover

About Show #471

How much administration do you need? Richard chats with Tech Fellow and Father-of-PowerShell Jeffrey Snover about Just Enough Administration (JEA). The goal of JEA is to get administrators to stop living in admin accounts, to operate day-to-day with regular domain accounts and only escalate up to admin for a specific task, typically written in PowerShell. Jeffrey talks about creating a "break glass in emergency" account that is the superadmin, only to be used when there's no other way to do something. This account should be heavily logged and scrutinized, so that root cause analysis can extract the needs for the event and create more automation and security granularity around it. JEA works on Server 2008R2 and above, and will be built into Server 2016!


Jeffrey Snover is a Technical Fellow at Microsoft and an Architect for Office 365 Intelligent Substrate. Prior to that he was the Chief Architect for the Azure Storage/Edge Group and Windows Server. Snover is the inventor of PowerShell, an open source, cross-platform object-based distributed automation engine, scripting language, and command line shell. Snover joined Microsoft in 1999 as architect for the Management and Services Division, providing technical direction across Microsoft's management technologies and products. Snover has nearly 40 years of industry experience with a focus on management technologies and solutions. He was an architect in the office of the CTO at Tivoli and a development manager at NetView. He has worked also as a consulting engineer and development manager at DEC, where he led various network and systems management projects. Snover is a frequent speaker at industry and research conferences on a variety of topics including: cloud, digital transformation, AI & ethics, management, and PowerShell.

Show Comments

blog comments powered by Disqus