question

AaronChristenson-7506 avatar image
0 Votes"
AaronChristenson-7506 asked

Can a PowerShell profile be used to limit commands similar to JEA?

Let's say I have the AD tools installed on a workstation. I know that JEA can limit the PSSRemoting session to a domain controller to Get-, I do not think that limits the PowerShell local session from running Set- or Remove- or anything but Get- commands.

Can we use profiles to limit the local PowerShell sessions to use Get-* only?

windows-server-powershell
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered AaronChristenson-7506 commented

Hello,

I think you can find well explained here the Capabilities of JEA Role

https://docs.microsoft.com/en-us/powershell/scripting/learn/remoting/jea/role-capabilities?view=powershell-7.2

PowerShell Remoting does not require administrator privileges. To allow non-administrators for example to perform specific administrator tasks, you can work with constrained session configurations (endpoints).



--If the reply is helpful, please Upvote and Accept as answer--

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

How does JEA work when the AD tools are installed on a workstation? If a user opens an Administrative PowerShell window and does set-aduser is that session a PS Remoting session to the domain controller?

0 Votes 0 ·