Privileged Administrative Workstations (PAWs) A hardened workstation for performing sensitive tasks like administration of domain controllers, cloud infrastructure, sensitive business functions etc.

Can provides protection from phishing attacks, OS vulnerabilities, credential replay attacks.

We can also configure privileged workstations like Domain Controller to be accessible ONLY from PAWs (as an Admin Jump Server). To do this there are multiple strategies:

• Separate privilege and hardware for administrative and normal tasks.
• Having a VM on a PAW for user tasks, which is turned on only when administrative operations need to be carried out.