PowerShell Admin mode - Access Controls and Security approaches

Tom Williams 21 Reputation points
2021-10-19T14:35:45.297+00:00

Anyone who has used PowerShell, knows that most operations require it to be run in an Elevated Admin Approved mode, otherwise many functions fail with obscure errors. However giving engineers or other power users full admin privileges akin to local administrator seems excessive. Is there a way to grant access to this functionality and still adhere to least privilege?
I typically create Privileged Engineer/Network/etc. accounts for those who need higher permissions when justified by appropriate paperwork. But as for the actual permissions and granularity in active directory/secpol. How does one split the difference.

V/R,
Tom Williams

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups
Windows for business | Windows Server | User experience | PowerShell
0 comments No comments
{count} votes

Accepted answer
  1. Rich Matheisen 47,901 Reputation points
    2021-10-19T18:44:06.523+00:00

    A starting point might be "Just Enough Administration: overview. JEA also works for PowerShell 5.

    1 person found this answer helpful.
    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Limitless Technology 39,921 Reputation points
    2021-10-20T09:08:33.133+00:00

    Hello anonymous user,

    Thank you for your question.

    It's something simple to be done, follow the steps below:

    1) Check the windows 10 version to determine the updates that need to be installed, for that do this action:

    Press the windows button on the keyboard + R and type: winver, after that a small box with some information should appear, one of them is the Version or Build.

    2) After that, access the link below to download the update according to version and Build:

    https://support.microsoft.com/en-us/topic/windows-10-update-history-1b6aac92-bf01-42b5-b158-f80c6d93eb11

    3) After verifying the update, you must download it from the Microsoft catalog through the link below:

    https://www.catalog.update.microsoft.com/Home.aspx

    example update name "KB5006670" just type that KB into the Microsoft Catalog and download the update.


    If the answer is helpful, please vote positively and accept as an answer.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.