(Reasonably) secure Azure Pipelines on-prem deployments

Azure Pipelines in action pt. III - reasonably secure deploys to IIS 04 Mar, 2025 Note: this approach might not be the easiest nor the most secure! The key point here is combining JEA with Azure Pipelines, but the whole process described here can be more complex than needed. Apparently it's much better to run the agent directly on the server Trying to implement a deployment flow from Azure Devops to an on-prem IIS server, where every account is not an administrator, is a surprisingly difficult task. Here's an approach that works for us, and might for you too! My other Azure posts One of the major wins on our automation journey thus far has been automating deployments to our internal IIS servers. This includes things like permission minimization, application pool manipulation and a huge number of gotchas. Here I'll try to go into as much detail as I can, but have to note from the get go: I'm not a Windows administrator, have little knowledge about networking and fledgling skills in ... Read full article.