Vol. 20, #28 - July 13, 2015 - Issue #1038
Just Enough Administration
- Editor's Corner
- Just Enough Administration
- Send us your feedback
- Recommended for Learning
- Microsoft Virtual Academy
- Quote of the Week
- Admin Toolbox
- Admin Tools We Think You Shouldn't Be Without
- This Week's Tips
- Before you upgrade to Windows 10
- Using PowerShell to Check Lockout Threshold for Domains
- Get the SharePoint Online Management Shell
- Events Calendar
- North America
- Webcast Calendar
- Join us at VirtualizationAdmin.com Online Conference 2015
- Register for Webcasts
- Tech Briefing
- Enterprise IT
- System Center
- Windows client
- Windows Server
- Recommended TechGenix Articles
- Recommended articles from websites in TechGenix Network
- Windows Server News
- Cloud, microservices help calm IoT skeptics' concerns
- How to use the shared virtual hard disk feature
- Microsoft virtual app delivery options for mobile devices
- Retiring useless VMs takes effort
- WServerNews FAVE Links
- Road Bike Freestyle 2 By Vittorio Brumotti
- Amazing Ladder Act by Uzeyer Novruzov
- Stowaway Cat Surprises Pilot During Take-Off
- The Secrets Of Paris Revealed In A New Ad From Heineken
- WServerNews - Product of the Week
- 100% Free Tool – Virtual Performance Monitor from VMTurbo
- SAVE THIS NEWSLETTER so you can refer back to it later for helpful tips, tools and resources!
- SEND YOUR FEEDBACK to [email protected] if you have any comments or suggestions!
This week's newsletter is all about Windows PowerShell Just Enough Administration (JEA) and how it can make your life easier as a senior administrator of an IT department. It's obviously a good thing if you can give those under you just enough tools and guidance for them to perform their assigned tasks. But as this Dilbert comic strip illustrates, there can be a flip side to the "just enough" paradigm:
Ask Our Readers: WServerNews has almost 100,000 subscribers worldwide. That's a lot of expertise to tap into. Do you need help with some issue or need advice on something IT-related? Got a question you'd like us to toss out to our readers to try and answer? Email us at [email protected]
Just Enough Administration
JEA is an emerging Windows PowerShell technology that lets administrators give operators only the level of access they need to be able to perform the tasks you assign to them. Giving those under you too much access can obviously lead to abuse. Giving them too little access on the other hand will simply leave them frustrated. But if you can give them exactly the amount of access they need to do their job, and no more and no less, then clearly you've found Nirvana, or at least the closest equivalent to it in the IT world.
JEA is still under development by Microsoft and it leverages the capabilities of Desired State Configuration (DSC), a new management platform previously introduced in PowerShell 4.0 that allows you to deploy and manage configuration data for software services and to manage the environment in which these services run. DSC ships with Windows Server 2012 R2 and Windows 8.1 as part of the Windows PowerShell DSC Resource Kit. If you're not familiar with DSC, yet you should read this blog post where it was first announced to get an idea of what it can do and how it works:
To help you learn about JEA and how it can help you reduce risk by limiting administrator exposure in your IT environment, we've assembled a selection of helpful resources on the topic including whitepapers, videos, and documentation. As your peruse these resources you'll be able to see that JEA has certain advantages compared with traditional role-based access control (RBAC) approaches to the problem of limiting administrator exposure.
Just Enough Administration Whitepaper (TechNet gallery)
Using Just Enough Administration Windows PowerShell Security Controls to Help Protect Enterprise Data (MSDN Library)
xJEA PowerShell Module (DSC Resource Kit) (TechNet Gallery)
Just Enough Administration, Step by Step (Building Clouds Blog)
Introducing the JEA Toolkit Helper
JEA Toolkit Helper (TechNet Gallery)
Creating a Secure Environment using PowerShell Desired State Configuration
JitJea: A Windows PowerShell Toolkit to Secure a Post-Snowden World (Channel 9)
How Microsoft IT uses Just Enough Administration PowerShell Security Controls to protect enterprise data (Microsoft IT Showcase)
Update JEA for the April WMF 5.0 Preview (Windows PowerShell Blog)
Omaha PSUG 05/26/2015 - John Slack - PowerShell and JEA (YouTube)
Have you tried out PowerShell JEA? Do you think it could be a workable solution for your organization? Do you have any questions or concerns about it? Send your thoughts to us at [email protected]
Send us your feedback
Got feedback about anything in this issue of WServerNews? Email us at [email protected]
Recommended for Learning
Microsoft Test Lab Guides (TLGs) let you to get hands-on experience with new products and technologies by using a pre-defined and tested methodology that provides you with a working configuration you can start from. The Base Configuration is the standard starting point from which you can start building your own test labs based on other TLGs from Microsoft, by using test lab extensions in the TechNet Wiki, or by creating a test lab of your own design.
For information about TLGs and the Base Configuration, see this page in the TechNet Wiki:
And to keep up with the ongoing saga of TLGs and the writers who love them, follow the Microsoft TLG blog:
Microsoft Virtual Academy
July 14: Building Linux-Based Solutions on Azure Jump Start
If you run an open-source infrastructure and are looking for a public cloud solution that fits your environment, be sure to join Senior Technical Evangelist Rick Claus and four engineers from the Azure Compute team for this live event. They'll show you how easy and efficient it is to build Linux-based solutions on Microsoft Azure. (In fact, 20% of virtual machines that run on Azure run Linux!) You'll discover options you can use to build, deploy, and manage your Linux infrastructure on Azure, in this demo-filled course. Register here!
Quote of the Week
"Computers are useless. They can only give you answers." --Pablo Picasso
Until next week,
Note to subscribers: If for some reason you don't receive your weekly issue of this newsletter, please notify us at [email protected] and we'll try to troubleshoot things from our end.
Unstoppable Copier lets you copy files from disks with problems such as bad sectors, scratches or that just give errors when reading data.
These height-adjustable standing desks feature a two-tiered design with an upper display surface and lower keyboard/mouse deck.
Script Browser for Windows PowerShell ISE enables you to search for over 9000 script samples in the TechNet Script Center from within the scripting environment.
GOT ADMIN TOOLS or other software/hardware you'd like to recommend? Email us at [email protected]
Before you upgrade to Windows 10
As you probably know by now, Microsoft is offering Windows 7/8/8.1 users a free upgrade to Windows 10 once it becomes available. The free upgrade offer doesn't apply to users running Enterprise editions of Windows or for devices that have Windows RT installed. More information on this offer can be found here:
and in this FAQ:
The question however is whether you will actually want to upgrade your Windows 7/8/8.1 systems to Windows 10. Besides the learning curve you'll face if you do this, you might also want to take a close look at the section called Feature Deprecation on this page so you can be fully aware of what you'll lose if you upgrade to Windows 10:
Also pay close attention to the section called Additional Requirements To Use Certain Features on this same page as it highlights the hardware requirements for certain Windows 10 features because if your Windows 7/8/8.1 systems don't fully support all these requirements then you won't be able to use some Windows 10 features after upgrading your systems.
Using PowerShell to Check Lockout Threshold for Domains
The Hey, Scripting Guy! Blog has a helpful new article on how you can use Windows PowerShell to check the lockout threshold for several domains:
Get the SharePoint Online Management Shell
If you're an Office 365 administrator you can now manage your SharePoint Online subscription using Windows PowerShell by downloading the new SharePoint Online Management Shell from the Microsoft Download Center:
GOT TIPS you'd like to share with other readers? Email us at [email protected]
North AmericaAWS re:Invent on October 6-9 in Las Vegas, Nevada USA
Microsoft Convergence on April 4-7, 2016 in New Orleans, Louisiana USA
Add Your Event
PLANNING A CONFERENCE OR OTHER EVENT you'd like to tell our 100,000 subscribers about? Contact [email protected]
Join us at VirtualizationAdmin.com Online Conference 2015
Virtualization CON 2015 is our annual, online gathering of admins and IT professionals joining with Virtualization Experts presenting the latest virtualization technologies, challenges and solutions. This year’s virtual live event takes place on Thursday, July 16, 2015 at 11AM EDT | 10AM CDT | 8AM PDT.
The conference will start with a Keynote Address by thirteen-time Microsoft MVP Brien Posey who will discuss the latest trends and technologies in virtualization. Brien will also join our panel of experts for a conference-concluding discussion addressing the virtualization related questions, issues and challenges that are facing the IT community.
Participation is limited to the first 1,000 attendees, so reserve your spot today!
Register for Webcasts
Add your Webcast
PLANNING A WEBCAST you'd like to tell our subscribers about? Contact [email protected]
Product Review: SolarWinds Server & Application Monitor (WindowsNetworking.com)
Video: Granting Elevated Privileges to users in Active Directory - Part 2 (WindowSecurity.com)
Extend Your Wireless Network's Signal (WindowsNetworking.com)
Network troubleshooting using PowerShell (WindowsNetworking.com)
Audit Collection Services Forwarder Addendum Management Pack (Kevin Holman)
Deep Dive into SCVMM 2012 R2 Networking and Storage (Part 3) (VirtualizationAdmin.com)
Windows 8 and 8.1 Security at Different Operating System Layers (WindowsNetworking.com)
Windows 10: Nearing the Finish Line (Part 3) (WindowsNetworking.com)
PowerShell Script to build your Nano Server Image (Nano Server)
How to use WDS to PxE Boot a Nano Server VHD (Nano Server)
Archiving Data to Amazon AWS (Part 4)
Importing a Virtual Machine into Amazon EC2 (Part 5)
Getting Started With Azure Pack (Part 4)
Windows 10 Varieties Explained - Choosing the Best Fit for You
Simplify Enterprise Wi-Fi Security and 802.1X on Small Networks
Cloud, microservices help calm IoT skeptics' concerns
While many consider IoT to be one of the most exciting IT concepts today, there are still a lot of skeptics. Numerous IT pros assume IoT is all about the network, but other technologies, such as microservices and cloud, should play equally important roles. Find out why you should put microservices and cloud at the heart of your IoT strategy.
How to use the shared virtual hard disk feature
With a shared virtual hard disk, you can deploy a guest failover cluster without needing to expose storage topology to VMs, thus reducing the time it would take to configure the shared storage for a guest cluster. Discover how easy it is to deploy a guest cluster using the shared virtual hard disk feature in Hyper-V 2012 R2.
Microsoft virtual app delivery options for mobile devices
Using a combination of Microsoft Intune and RemoteApp for virtual apps, you can deliver the applications users need to their mobile devices, but no one approach is perfect. Learn about the different app delivery options available for mobile devices and determine which one, or if a combination, works best for you.
Retiring useless VMs takes effort
Is there a zombie VM lingering in your environment? There are countless ways VMs can wander into your virtual environment, sucking up resources while providing no real purpose. Fortunately, there are some easy techniques to track them down and get rid of them for good – learn how inside.
This Week's Links We Like. Tips, Hints And Fun Stuff
GOT FUN VIDEOS or other fun links to suggest you'd like to recommend? Email us at [email protected]
Road Bike Freestyle 2 By Vittorio Brumotti
World champion and 10-times Guinness World Record holder Vittorio Brumotti takes his love of bicycles to new heights:
Amazing Ladder Act by Uzeyer Novruzov
The amazing ladder act by Uzeyer Novruzov impresses the judges and audience of America's Got Talent 2015:
Stowaway Cat Surprises Pilot During Take-Off
Pilot and passenger of a light-sport aircraft in French Guiana are surprised when a cat suddenly crawls in from the wing:
The Secrets Of Paris Revealed In A New Ad From Heineken
A group of tourists are rescued from their boring tour by a true insider who takes them on a journey they are not likely to forget anytime soon:
WServerNews - Editors
Mitch Tulloch is Senior Editor of WServerNews and is a widely recognized expert on Windows administration, deployment and virtualization. Mitch was lead author of the bestselling Windows 7 Resource Kit and has been author or series editor for almost fifty books mostly published by Microsoft Press. Mitch is also a ten-time recipient of Microsoft's Most Valuable Professional (MVP) award for his outstanding contributions in support of the global IT pro community. Mitch owns and runs an information technology content development business based in Winnipeg, Canada. For more information see www.mtit.com.
Ingrid Tulloch is Associate Editor of WServerNews and was co-author of the Microsoft Encyclopedia of Networking from Microsoft Press. Ingrid is also manages research and marketing for our content development business and has co-developed university-level courses in Information Security Management for a Masters of Business Administration program.