{"id":819,"date":"2024-12-26T05:35:38","date_gmt":"2024-12-26T02:35:38","guid":{"rendered":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/"},"modified":"2024-12-26T05:35:38","modified_gmt":"2024-12-26T02:35:38","slug":"implementing-just-enough-administration-jea-in-windows-server","status":"publish","type":"post","link":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/","title":{"rendered":"Implementing Just Enough Administration (JEA) in Windows Server"},"content":{"rendered":"


\n<\/p>\n

Just Enough Administration (JEA) is a powerful security feature in Windows Server that allows you to delegate specific administrative tasks to users without granting them full administrator privileges. This model helps minimize the risk of unintended changes or security breaches while streamlining administrative workloads. In this article, we will explore the steps necessary to implement JEA in Windows Server, ensuring that you can maintain a secure and efficient environment.<\/p>\n

<\/p>\n

What is Just Enough Administration (JEA)?<\/h2>\n

<\/p>\n

JEA is part of Windows PowerShell and was introduced in Windows Server 2016. It provides a way to create constrained endpoints that enable users to perform only the administrative tasks that they are allowed to perform. With JEA, you can limit the scope of user permissions, ensuring they have \u201cjust enough\u201d rights to get their jobs done and nothing more.<\/p>\n

<\/p>\n

Benefits of JEA<\/h2>\n

<\/p>\n

    <\/p>\n
  1. Increased Security<\/strong>: JEA minimizes the attack surface by restricting user permissions to only what is necessary.<\/li>\n

    <\/p>\n

  2. Auditing and Compliance<\/strong>: Operations performed through JEA sessions can be logged, providing a clear audit trail for compliance purposes.<\/li>\n

    <\/p>\n

  3. Simplified Management<\/strong>: Administrators can create tailored access profiles for different roles, reducing the complexity of managing user permissions.<\/li>\n

    \n<\/ol>\n

    <\/p>\n

    Prerequisites for JEA<\/h2>\n

    <\/p>\n

    Before implementing JEA, ensure that you have the following:<\/p>\n

    <\/p>\n

      <\/p>\n
    • Windows Server 2016 or later<\/li>\n

      <\/p>\n

    • Administrative privileges to create JEA endpoints<\/li>\n

      <\/p>\n

    • A working knowledge of PowerShell<\/li>\n

      \n<\/ul>\n

      <\/p>\n

      Step-by-Step Guide to Implementing JEA<\/h2>\n

      <\/p>\n

      1. Install the Required Features<\/h3>\n

      <\/p>\n

      Before you can create JEA endpoints, ensure that the PowerShell module Microsoft.PowerShell.Graphical<\/code> is installed. Open PowerShell as an administrator and run the following command:<\/p>\n

      <\/p>\n

      Install-WindowsFeature -Name PowerShell-ISE<\/code><\/pre>\n
      <\/p>\n
      2. Create a JEA Session Configuration<\/h3>\n
      <\/p>\n
      A JEA session configuration defines what commands users can execute and the roles they can perform. To create a JEA configuration, follow these steps:<\/p>\n
      <\/p>\n
        <\/p>\n
      • Open PowerShell as an administrator.<\/li>\n
        <\/p>\n
      • Create a new session configuration file. You can use the New-PSSessionConfigurationFile<\/code> cmdlet to create a configuration that specifies the roles, scripts, and modules that are available to the user.<\/li>\n
        \n<\/ul>\n
        <\/p>\n
        New-PSSessionConfigurationFile -VisibleCmdlets 'Get-Service', 'Stop-Service', 'Start-Service' -SessionType RestrictedRemote -Path 'C:\\JEA\\MyJEAConfig.pssc'<\/code><\/pre>\n
        <\/p>\n
        3. Register the JEA Session Configuration<\/h3>\n
        <\/p>\n
        Once you have created the session configuration file, you need to register it with the PowerShell session configuration manager.<\/p>\n
        <\/p>\n
        Register-PSSessionConfiguration -Name MyJEAConfig -Path 'C:\\JEA\\MyJEAConfig.pssc'<\/code><\/pre>\n
        <\/p>\n
        4. Create a Role Capability File<\/h3>\n
        <\/p>\n
        Role capability files define the specific commands and scripts that can be executed within the JEA session. Create a new role capability file that corresponds to the permissions required for certain users:<\/p>\n
        <\/p>\n
          <\/p>\n
        1. Create a directory for your role capabilities (e.g., C:\\JEA\\RoleCapabilities<\/code>).<\/li>\n
          <\/p>\n
        2. Create a role capability file (e.g., MyRole.psrc<\/code>).<\/li>\n
          \n<\/ol>\n
          <\/p>\n
          New-PSRoleCapabilityFile -Path 'C:\\JEA\\RoleCapabilities\\MyRole.psrc' -VisibleCmdlets 'Get-Service', 'Stop-Service', 'Start-Service'<\/code><\/pre>\n
          <\/p>\n
          5. Modify the JEA Session Configuration to Use Role Capabilities<\/h3>\n
          <\/p>\n
          Ensure the MyJEAConfig.pssc<\/code> file references the role capability file you created:<\/p>\n
          <\/p>\n
          <Configuration>
          \n    <SessionType>RestrictedRemote<\/SessionType>
          \n    <VisibleCmdlets>
          \n        <Cmdlet>Get-Service<\/Cmdlet>
          \n    <\/VisibleCmdlets>
          \n    <RoleCapabilitiy>
          \n        <Name>MyRole<\/Name>
          \n    <\/RoleCapabilitiy>
          \n<\/Configuration><\/code><\/pre>\n
          <\/p>\n
          6. Assign Users to JEA Roles<\/h3>\n
          <\/p>\n
          You need to specify which users or groups can access the JEA configuration you created. This is done within the MyJEAConfig.pssc<\/code> file using the Groups<\/code> element. For example, to allow a specific Active Directory group access:<\/p>\n
          <\/p>\n
          <Authorization>
          \n    <Groups>
          \n        <Group>DOMAIN\\JEAAdmins<\/Group>
          \n    <\/Groups>
          \n<\/Authorization><\/code><\/pre>\n
          <\/p>\n
          7. Testing the JEA Configuration<\/h3>\n
          <\/p>\n
          To test if the configuration works as expected, start a new PowerShell session using the JEA endpoint:<\/p>\n
          <\/p>\n
          Enter-PSSession -ConfigurationName MyJEAConfig -UserName UserName -ComputerName localhost<\/code><\/pre>\n
          <\/p>\n
          Once logged in, users will only have access to the commands specified in the role capability file.<\/p>\n
          <\/p>\n
          8. Audit and Monitor JEA Sessions<\/h3>\n
          <\/p>\n
          To ensure compliance and security, you should enable logging for JEA sessions. You can set up logging in the JEA session configuration file as follows:<\/p>\n
          <\/p>\n
          <Logging>
          \n    <LogPath> C:\\JEA\\JEA_Logs<\/LogPath>
          \n<\/Logging><\/code><\/pre>\n
          <\/p>\n
          This will store logs of all sessions initiated through JEA, allowing you to monitor user activity.<\/p>\n
          <\/p>\n
          Conclusion<\/h2>\n
          <\/p>\n
          Implementing Just Enough Administration (JEA) in Windows Server is an effective way to heighten security while allowing users to perform necessary tasks without full administrative access. By following the steps outlined in this article, you can create a robust administrative framework that embraces the principle of least privilege, ensuring that your Windows Server environment is secure and compliant. <\/p>\n
          <\/p>\n
          For more information on Windows Server capabilities or further assistance on JEA, make sure to explore the official Microsoft documentation or reach out to the Windows Server community.<\/p>\n
          <\/p>\n
          \n
          <\/p>\n
          Feel free to share your experiences or any questions regarding JEA in the comments below! Happy administrating!<\/p>\n\n","protected":false},"excerpt":{"rendered":"
          Just Enough Administration (JEA) is a powerful security feature in Windows Server that allows you to delegate specific administrative tasks to users without granting them full administrator privileges. This model helps minimize the risk of unintended changes or security breaches while streamlining administrative workloads. In this article, we will explore the steps necessary to implement […]<\/p>\n","protected":false},"author":2,"featured_media":820,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[24],"tags":[505,208,506,266,276],"class_list":["post-819","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-windows-security","tag-administration","tag-implementing","tag-jea","tag-server","tag-windows","et-has-post-format-content","et_post_format-et-post-format-standard"],"yoast_head":"\nImplementing Just Enough Administration (JEA) in Windows Server - WafaTech Blogs<\/title>\n<meta name=\"description\" content=\"Implementing Just Enough Administration (JEA) in Windows Server %\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Implementing Just Enough Administration (JEA) in Windows Server\" \/>\n<meta property=\"og:description\" content=\"Implementing Just Enough Administration (JEA) in Windows Server %\" \/>\n<meta property=\"og:url\" content=\"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/\" \/>\n<meta property=\"og:site_name\" content=\"WafaTech Blogs\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/people\/WafaTech\/61560546351289\/\" \/>\n<meta property=\"article:published_time\" content=\"2024-12-26T02:35:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/wafatech.sa\/blog\/wp-content\/uploads\/2024\/06\/logo_big.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"2221\" \/>\n\t<meta property=\"og:image:height\" content=\"482\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"WafaTech SA\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@wafatech_sa\" \/>\n<meta name=\"twitter:site\" content=\"@wafatech_sa\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"WafaTech SA\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/windows-server\\\/windows-security\\\/implementing-just-enough-administration-jea-in-windows-server\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/windows-server\\\/windows-security\\\/implementing-just-enough-administration-jea-in-windows-server\\\/\"},\"author\":{\"name\":\"WafaTech SA\",\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/#\\\/schema\\\/person\\\/1a5761fc0feb63ab59d295d7c2648f06\"},\"headline\":\"Implementing Just Enough Administration (JEA) in Windows Server\",\"datePublished\":\"2024-12-26T02:35:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/windows-server\\\/windows-security\\\/implementing-just-enough-administration-jea-in-windows-server\\\/\"},\"wordCount\":644,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/windows-server\\\/windows-security\\\/implementing-just-enough-administration-jea-in-windows-server\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/Implementing-Just-Enough-Administration-JEA-in-Windows-Server.png\",\"keywords\":[\"Administration\",\"Implementing\",\"JEA\",\"Server\",\"Windows\"],\"articleSection\":[\"Windows Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/wafatech.sa\\\/blog\\\/windows-server\\\/windows-security\\\/implementing-just-enough-administration-jea-in-windows-server\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/windows-server\\\/windows-security\\\/implementing-just-enough-administration-jea-in-windows-server\\\/\",\"url\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/windows-server\\\/windows-security\\\/implementing-just-enough-administration-jea-in-windows-server\\\/\",\"name\":\"Implementing Just Enough Administration (JEA) in Windows Server - WafaTech Blogs\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/windows-server\\\/windows-security\\\/implementing-just-enough-administration-jea-in-windows-server\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/windows-server\\\/windows-security\\\/implementing-just-enough-administration-jea-in-windows-server\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/Implementing-Just-Enough-Administration-JEA-in-Windows-Server.png\",\"datePublished\":\"2024-12-26T02:35:38+00:00\",\"description\":\"Implementing Just Enough Administration (JEA) in Windows Server %\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/windows-server\\\/windows-security\\\/implementing-just-enough-administration-jea-in-windows-server\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/wafatech.sa\\\/blog\\\/windows-server\\\/windows-security\\\/implementing-just-enough-administration-jea-in-windows-server\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/windows-server\\\/windows-security\\\/implementing-just-enough-administration-jea-in-windows-server\\\/#primaryimage\",\"url\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/Implementing-Just-Enough-Administration-JEA-in-Windows-Server.png\",\"contentUrl\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/Implementing-Just-Enough-Administration-JEA-in-Windows-Server.png\",\"width\":1024,\"height\":1024,\"caption\":\"windows server JEA\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/windows-server\\\/windows-security\\\/implementing-just-enough-administration-jea-in-windows-server\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Implementing Just Enough Administration (JEA) in Windows Server\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/\",\"name\":\"WafaTech Blogs\",\"description\":\"Smart Technologies\",\"publisher\":{\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/#organization\"},\"alternateName\":\"WafaTech\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/#organization\",\"name\":\"WafaTech Blogs\",\"alternateName\":\"WafaTech\",\"url\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/logo_big.webp\",\"contentUrl\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/logo_big.webp\",\"width\":2221,\"height\":482,\"caption\":\"WafaTech Blogs\"},\"image\":{\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/people\\\/WafaTech\\\/61560546351289\\\/\",\"https:\\\/\\\/x.com\\\/wafatech_sa\",\"https:\\\/\\\/www.youtube.com\\\/@wafatech-sa\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/wafatech\\\/\"],\"description\":\"WafaTech, a leading Saudi IT services provider, specializes in cloud solutions, connectivity, and ICT services. Offering secure cloud infrastructure, high-speed internet, and ICT solutions like hosting, backup, and disaster recovery, WafaTech operates a Tier 3 data center at KAUST with ISO certifications. Regulated by CST, the company is committed to innovation, security, and customer satisfaction, empowering businesses in the digital age.\",\"email\":\"sales@wafatech.sa\",\"legalName\":\"Al-Wafa Al-Dhakia For Information Technology LLC\",\"foundingDate\":\"2013-01-08\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"11\",\"maxValue\":\"50\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/#\\\/schema\\\/person\\\/1a5761fc0feb63ab59d295d7c2648f06\",\"name\":\"WafaTech SA\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fde877f001a2e0497276edc0684d3ba2a416c0de8caeb8e785076a1b1b932b3a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fde877f001a2e0497276edc0684d3ba2a416c0de8caeb8e785076a1b1b932b3a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fde877f001a2e0497276edc0684d3ba2a416c0de8caeb8e785076a1b1b932b3a?s=96&d=mm&r=g\",\"caption\":\"WafaTech SA\"},\"url\":\"https:\\\/\\\/wafatech.sa\\\/blog\\\/author\\\/omer-yaseen\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Implementing Just Enough Administration (JEA) in Windows Server - WafaTech Blogs","description":"Implementing Just Enough Administration (JEA) in Windows Server %","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/","og_locale":"en_US","og_type":"article","og_title":"Implementing Just Enough Administration (JEA) in Windows Server","og_description":"Implementing Just Enough Administration (JEA) in Windows Server %","og_url":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/","og_site_name":"WafaTech Blogs","article_publisher":"https:\/\/www.facebook.com\/people\/WafaTech\/61560546351289\/","article_published_time":"2024-12-26T02:35:38+00:00","og_image":[{"width":2221,"height":482,"url":"https:\/\/wafatech.sa\/blog\/wp-content\/uploads\/2024\/06\/logo_big.webp","type":"image\/webp"}],"author":"WafaTech SA","twitter_card":"summary_large_image","twitter_creator":"@wafatech_sa","twitter_site":"@wafatech_sa","twitter_misc":{"Written by":"WafaTech SA","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/#article","isPartOf":{"@id":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/"},"author":{"name":"WafaTech SA","@id":"https:\/\/wafatech.sa\/blog\/#\/schema\/person\/1a5761fc0feb63ab59d295d7c2648f06"},"headline":"Implementing Just Enough Administration (JEA) in Windows Server","datePublished":"2024-12-26T02:35:38+00:00","mainEntityOfPage":{"@id":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/"},"wordCount":644,"commentCount":0,"publisher":{"@id":"https:\/\/wafatech.sa\/blog\/#organization"},"image":{"@id":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/#primaryimage"},"thumbnailUrl":"https:\/\/wafatech.sa\/blog\/wp-content\/uploads\/2024\/12\/Implementing-Just-Enough-Administration-JEA-in-Windows-Server.png","keywords":["Administration","Implementing","JEA","Server","Windows"],"articleSection":["Windows Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/","url":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/","name":"Implementing Just Enough Administration (JEA) in Windows Server - WafaTech Blogs","isPartOf":{"@id":"https:\/\/wafatech.sa\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/#primaryimage"},"image":{"@id":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/#primaryimage"},"thumbnailUrl":"https:\/\/wafatech.sa\/blog\/wp-content\/uploads\/2024\/12\/Implementing-Just-Enough-Administration-JEA-in-Windows-Server.png","datePublished":"2024-12-26T02:35:38+00:00","description":"Implementing Just Enough Administration (JEA) in Windows Server %","breadcrumb":{"@id":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/#primaryimage","url":"https:\/\/wafatech.sa\/blog\/wp-content\/uploads\/2024\/12\/Implementing-Just-Enough-Administration-JEA-in-Windows-Server.png","contentUrl":"https:\/\/wafatech.sa\/blog\/wp-content\/uploads\/2024\/12\/Implementing-Just-Enough-Administration-JEA-in-Windows-Server.png","width":1024,"height":1024,"caption":"windows server JEA"},{"@type":"BreadcrumbList","@id":"https:\/\/wafatech.sa\/blog\/windows-server\/windows-security\/implementing-just-enough-administration-jea-in-windows-server\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/wafatech.sa\/blog\/"},{"@type":"ListItem","position":2,"name":"Implementing Just Enough Administration (JEA) in Windows Server"}]},{"@type":"WebSite","@id":"https:\/\/wafatech.sa\/blog\/#website","url":"https:\/\/wafatech.sa\/blog\/","name":"WafaTech Blogs","description":"Smart Technologies","publisher":{"@id":"https:\/\/wafatech.sa\/blog\/#organization"},"alternateName":"WafaTech","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/wafatech.sa\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/wafatech.sa\/blog\/#organization","name":"WafaTech Blogs","alternateName":"WafaTech","url":"https:\/\/wafatech.sa\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wafatech.sa\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/wafatech.sa\/blog\/wp-content\/uploads\/2024\/06\/logo_big.webp","contentUrl":"https:\/\/wafatech.sa\/blog\/wp-content\/uploads\/2024\/06\/logo_big.webp","width":2221,"height":482,"caption":"WafaTech Blogs"},"image":{"@id":"https:\/\/wafatech.sa\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/people\/WafaTech\/61560546351289\/","https:\/\/x.com\/wafatech_sa","https:\/\/www.youtube.com\/@wafatech-sa","https:\/\/www.linkedin.com\/company\/wafatech\/"],"description":"WafaTech, a leading Saudi IT services provider, specializes in cloud solutions, connectivity, and ICT services. Offering secure cloud infrastructure, high-speed internet, and ICT solutions like hosting, backup, and disaster recovery, WafaTech operates a Tier 3 data center at KAUST with ISO certifications. Regulated by CST, the company is committed to innovation, security, and customer satisfaction, empowering businesses in the digital age.","email":"sales@wafatech.sa","legalName":"Al-Wafa Al-Dhakia For Information Technology LLC","foundingDate":"2013-01-08","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"11","maxValue":"50"}},{"@type":"Person","@id":"https:\/\/wafatech.sa\/blog\/#\/schema\/person\/1a5761fc0feb63ab59d295d7c2648f06","name":"WafaTech SA","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fde877f001a2e0497276edc0684d3ba2a416c0de8caeb8e785076a1b1b932b3a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fde877f001a2e0497276edc0684d3ba2a416c0de8caeb8e785076a1b1b932b3a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fde877f001a2e0497276edc0684d3ba2a416c0de8caeb8e785076a1b1b932b3a?s=96&d=mm&r=g","caption":"WafaTech SA"},"url":"https:\/\/wafatech.sa\/blog\/author\/omer-yaseen\/"}]}},"jetpack_featured_media_url":"https:\/\/wafatech.sa\/blog\/wp-content\/uploads\/2024\/12\/Implementing-Just-Enough-Administration-JEA-in-Windows-Server.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wafatech.sa\/blog\/wp-json\/wp\/v2\/posts\/819","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wafatech.sa\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wafatech.sa\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wafatech.sa\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/wafatech.sa\/blog\/wp-json\/wp\/v2\/comments?post=819"}],"version-history":[{"count":0,"href":"https:\/\/wafatech.sa\/blog\/wp-json\/wp\/v2\/posts\/819\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wafatech.sa\/blog\/wp-json\/wp\/v2\/media\/820"}],"wp:attachment":[{"href":"https:\/\/wafatech.sa\/blog\/wp-json\/wp\/v2\/media?parent=819"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wafatech.sa\/blog\/wp-json\/wp\/v2\/categories?post=819"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wafatech.sa\/blog\/wp-json\/wp\/v2\/tags?post=819"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}