{"id":75271,"date":"2015-12-05T00:01:00","date_gmt":"2015-12-05T00:01:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2015\/12\/05\/weekend-scripter-taking-jea-for-a-spinpart-1\/"},"modified":"2019-02-18T09:20:47","modified_gmt":"2019-02-18T16:20:47","slug":"weekend-scripter-taking-jea-for-a-spinpart-1","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/weekend-scripter-taking-jea-for-a-spinpart-1\/","title":{"rendered":"Weekend Scripter: Taking JEA for a Spin\u2014Part 1"},"content":{"rendered":"

Summary<\/b>: Thomas Rayner explores code promotion <\/span>with Just Enough Admin (JEA) in Windows Server 2016.<\/p>\n

Hello! I’m Thomas Rayner, a proud Cloud and Datacenter Management Microsoft MVP, filling in for The Scripting Guy this weekend. You can find me on Twitter (@MrThomasRayner<\/a>). I also post my blog bi-weekly: Working Sysadmin—Figuring stuff out at work<\/a>. The temperature is dropping and the snow is starting to fly here in Alberta, Canada so I’m going to stay in this weekend and take an awesome new feature in Windows Server 2016, Just Enough Admin (JEA), for a spin. I’ll explore how it can be applied in a situation where a limited user has permissions to run only one script for code promotion.<\/p>\n

JEA was one of the new features introduced with Windows Server 2016 TP4 when it was released in November 2015. Previously, JEA had existed as a DSC module, but now it is baked right into the operating system. I couldn’t wait to get my hands on it, so I put together a first look on my blog: Just Enough Administration (JEA) First Look<\/a>.<\/p>\n

At the end of that post, I shared a handful of potential use cases, and this weekend I’m going to demonstrate a couple of them. If this is the first you’ve heard of JEA, I’d suggest taking a look at this article on MSDN: Using Just Enough Administration Windows PowerShell Security Controls to Help Protect Enterprise Data<\/a>.<\/p>\n

Today, the use case I’m going to demonstrate is code promotion. There are about a billion different ways to promote code through a software development lifecycle, but for this proof of concept, I will tackle a situation where files are staged somewhere and must simply be copied to a production server. Let’s take a look at the requirements for the remote PowerShell sessions that JEA is going to manage for this purpose.<\/p>\n

Users must be able to:<\/b><\/p>\n