Because of SSO they are logged in automatically and because of authorization rules they won’t be able to see pages they are not permitted see. Basically you add helpdesk user in AD group and direct them to site. Your authentication method could be ADFS SSO and for authorization you could use AD group. Your UD page could be a form for creating new users.
You could store passwords on server in vault, secure strings, SQL DB or some custom solution like passwordstate running on same IIS.įor IDE, it comes with official support and module for VSCodeĪn example setup could be running a service account that has delegated access to AD. I see it as next evolutionary step to win/wpf forms and it’s great for JEA as it supports authentication (forms, ADFS, etc) and authorization rules out of box. However, you can also host it as your PS repo website running on IIS, optionally with SQL/SQLite or run main script as windows service. It uses Powershell to create web forms (CSS optional) for UI and can also create executables. You might want to consider “UniversalDashboard” instead. My questions about the PowerShell Studio software is, is it worth the $400 one time cost + the $200 per year maintenance package? And if I purchase it, package my script into an exe or msi, will they function forever or until my renewal comes up, and if I chose not to renew, will I be able to continue to build scripts into packages without issue? in the next 6 months local admin rights will be removed and I’d like to find a way to make my utility run as the built in administrator so that the helpdesk does not need to login as their higher privilege account to perform these actions. Wrapping it in an exe was the easiest way (I think) for our org as we have group polices restricting powershell scripts unless they’re made on the machine they are running on.
I have written a utility for our L1 and L2 helpdesk to help them in accomplishing tasks when users call, things such as storing the bitlocker key in Active Directory, running the windows KMS for licensing, checking for specific software/services that are security requirements and if they’re not found to install them.
I am currently using Microsoft Visual Studio code and then using PS2EXE GUI to wrap the script into an executable. Hey folks, I am currently looking at Sapien PowerShell Studio : īe able to create an exe or msi with a code signing certificate (from my org).Ībility to build credentials into the exe or msi (exe or msi would run as a user).
0 kommentar(er)
