Granular Administrative Permissions with DSC

I would like to learn more about using DSC to get very granular with administrative permissions on desktops. At TechEd one of the presenters mentioned you could really lock down most admin capabilities, but still give your users the ability to be administrators of the rest of the machine. Anyone know of a great high level starting point?

I live in SCCM and I am starting to use powershell daily, but for granular admin permissions I am not finding much info by google search.

Thanks in advance.


What you’re looking after is the “Just Enough Administration” (JEA) toolkit. Jeffrey Snover’s TechEd 2014 session, available on Channel 9, would be a good starting point.

PERFECT! Thanks!