PowerShell’s admin-lite scheme is an open door

Microsoft’s PowerShell feature “Just Enough Administration” (JEA) is, apparently, “way too much administration” according to researcher Matt Weeks.

In this write-up of JEA, root9B and Metasploit module developer Weeks says JEA profiles aren’t much of a barrier, since people with JEA profiles can escalate themselves to sysadmin status. Cutting to the conclusion: