Advanced JEA Configurations
summary
Shows how Just Enough Administration actually gets used: live demos build JEA session configs, enable transcription logging, and run Break Glass account workflows that trigger alerts; demos create and delete AD users via the active directory module and prove identity by writing files as the run as virtual account. Coverage includes using a group managed service account (gmsa), logon scripts that centralize alerts, whitelist pitfalls (get* can expose files), and occasional demo failures from a crashed laptop.
AI-written summary · about
chapters (11)
- 0:00JEA overview
- 1:12Logging and transcription in JEA
- 3:26JEA config files
- 8:07JEA endpoints
- 13:04JEA transcriptions
- 18:05Virtual and run-as accounts
- 28:23Group Managed Service Accounts
- 36:41Logon scripts for security
- 42:20Break glass accounts with PAM
- 51:00Whitelisting commands
- 54:02Q&A
related talks
41mGetting started with Just Enough Administration (JEA)
43mSecuring your Environment with Just Enough Administration
46mWebJEA: PowerShell driven Web Forms for Secure Self-Service
57mJust Enough Admin - Security in a Post-Snowden World
51mAdvanced Attack Vectors in Azure Environments
27mGive Agents the Right Keys - Identity Assertion for Enterprise APIs
55mOffensive Azure Security
28mAgentic Development at Enterprise Scale: RAG, MCP & Guardrails