Privileged Access Workstation

If you really want to take security seriously, then you need to provide the highest levels of security for your privileged accounts to prevent malicious behavior through compromised access. Microsoft has developed a complete set of guidance materials on how to configure specific workstations used by administrators and other privileged accounts to carry out sensitive tasks, such as systems administration and high-value financial transactions.

In this model, the computers are designated specifically for privileged access, blocking any other accounts from logging on interactively or via the network. Instead of logging on to the computer as a standard user and elevating privileges to gain access to sensitive information and systems, the user logs onto the PAW computer directly with the privileged account and carries out the tasks required.

This system works by preventing the usual risky behaviors such as internet browsing, opening emails and attachments...