A
PAW is a dedicated, hardened workstation used exclusively for administrative tasks — no email, web browsing, or standard user apps — reducing the risk of malware compromising admin credentials.
PAWs prevent credential theft via malware on admin workstations. Separate from day-to-day workstations. Admin-only: no browsing, email, or office apps. Physical or VM-based. Essential for Tier 0 (Domain Admin) and Tier 1 (server admin) access.