Ways to protect Hyper-V environments from administrators
Some options to lock down your Hyper-V environment.
April 10, 2016
Q. How can I protect my Hyper-V environment from administrators?
A. Administrators are typically trusted individuals in an organization and so if you have administrators that you do not trust then typically they should not be administrators however there are options:
Pre-Windows Server 2016 you should either not make users administrators of the Hyper-V server or use Just Enough Administration (JEA) https://msdn.microsoft.com/en-us/powershell/wmf/jea_overview to grant administrators privileges only when they need it
Windows Server 2016 use Shielded VMs which I cover in detail at http://windowsitpro.com/hyper-v/super-secure-hyper-v-environments-shielded-vms-2016
Each week, John Savill answers all of your toughest tech questions about the worlds of Windows Server, Azure, and beyond. Read his past IT advice here, and email your questions to [email protected].
About the Author
You May Also Like