Can a PowerShell profile be used to limit commands similar to JEA?

Aaron Christenson 41 Reputation points
2022-05-18T20:08:12.567+00:00

Let's say I have the AD tools installed on a workstation. I know that JEA can limit the PSSRemoting session to a domain controller to Get-, I do not think that limits the PowerShell local session from running Set- or Remove-* or anything but Get-* commands.

Can we use profiles to limit the local PowerShell sessions to use Get-* only?

Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,362 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Limitless Technology 39,351 Reputation points
    2022-05-23T09:39:07.053+00:00

    Hello,

    I think you can find well explained here the Capabilities of JEA Role

    https://learn.microsoft.com/en-us/powershell/scripting/learn/remoting/jea/role-capabilities?view=powershell-7.2

    PowerShell Remoting does not require administrator privileges. To allow non-administrators for example to perform specific administrator tasks, you can work with constrained session configurations (endpoints).

    --------------------------------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept as answer--