Active Directory has been around for two decades and mostly used on Windows Server, and most popular on Windows 2000 Server.
You will find many administration tools written for Active Directory, and ADUC (Active Directory Users and Computers) is one of the most notable.
Many of the features found in ADUC are available in a new tool, Active Directory Administrative Center, though ADUC is still hugely popular for remote administrators.
Here you can find out more about the programs and features of this server administration tool. You can also find how to enable other tools that make remote server administration much more manageable.
What Does Active Directory Users and Computers Do?
ADUC is an MMC (Microsoft Management Console) snap-in, which enables administrators the chance to manage Active Directory objects. With ADUC, you can unlock users, reset passwords, and change group memberships, and a lot more besides.
How Do I Get Active Directory Users and Computers on Windows 10?
In October 2018, all of the Active Directory administration tools were moved to RSAT, a ‘Feature on Demand.’ It was in response to hackers who could take over ADUC controlled computers and set access, or restrict access depending on their needs.
As the feature isn’t enabled by default, so you do need to install it. You can find two versions here depending which version of Windows 10 you are running.
Install ADUC on Windows 10 Version 1809 or Above
- Select the Start menu, and select ‘Settings – Apps’
- Click on the hyperlink to the right side. ‘Manage Optional Features,’ and click the ‘Add’ feature button
- Select RSAT: Active Directory Domain Services and Lightweight Directory Tools.
- Click on ‘Install’
Install ADUC on Windows 8 and Windows 10 Version 1803 and Under
- Navigate to the Remote Server Administration Tools for Windows 10 page here: https://www.microsoft.com/en-us/download/details.aspx?id=45520
- Download and install the tool for your version of Windows
- Click on the Start button and select Control Panel and Select Programs
- Select Programs and Features, and then Turn Windows features on or off
- Scroll down and expand ‘Remote Server Administration Tools’
- Expand the role ‘Administration Tools’
- Expand AD, DS, and AD, LDS, Tools
- Check AD DS Tools, and then click ‘OK’
Where is Active Directory Users and Computers?
Once you have run through the installation process for each of the above remote server administration tools, you don’t need to head to the control panel to find them.
You only need to click on the Start menu, and you will see a folder named ‘Administrative Tools.’
How do I install RSAT on Windows 10?
RSAT is a Feature-On-Demand for Windows 10 version 1809 and later.
With earlier versions, you would need RSAT to be downloaded manually. However, now RSAT is installed by the use of the Settings app instead of using the Control Panel.
Here are the steps to install RSAT on your Windows 10 machine.
- Log into your Windows 10 computer using the administrator account
- Open the Settings app by pressing ‘WIN+I’
- Click ‘Apps’ in the Settings app
- Once in the Apps & features screen, select ‘Manage optional features’
- In this screen, select ‘+ Add a feature’
- Scroll in the list of features until you find RSAT.
- All the tools are individually installed, so select ones you wish to add and click ‘Install’
Other tools you can install here are as follows:
- RSAT: DNS Server tools
- RSAT: Failover Clustering tools
- RSAT: File Services tools
- RSAT: Group Policy Management tools
- RSAT: IP Address management client (IPAM)
- RSAT: Network Controller management tools
- RSAT: Network load balancing tools
It is also possible for advanced users to install using the command line.
Here are the straightforward steps to install the RSAT Active Directory Windows features from the command prompt.
- Click on the Start Menu or press the keyboard shortcut Win+R. Type ‘cmd’ and then press Enter
- In here, you can use the following commands:
- dism /online /enable-feature /featurename:RSATClient-Roles-AD
- dism /online /enable-feature /featurename:RSATClient-Roles-AD-DS
- dism /online /enable-feature /featurename:RSATClient-Roles-AD-DS-SnapIns
How Do I Enable RSAT on Windows 10?
Once you run through any of the above installation routines for the Active Directory administrative tools, they will be enabled ready for use.
However, once you come to use the tools, you may face errors at some time. RSAT can crash for a few different reasons such as failed updates, corrupt installation files or OS incompatibilities.
Also, there can be issues when a server administrator tries to modify any administration tools such as IPMA, ADCS or ADAC. ADAC being the most troublesome culprit.
It can be straightforward to troubleshoot errors.
- Check the RSAT compatibility. You will have different versions of RSAT for different versions of Windows. Check your RSAT version is compatible. You may need to uninstall the previous version and install the latest version completely. Installing to the latest version of Windows can help these issues as it is far easier to install the features
- If you see an RSAT installation error ‘0x800f0954’
- Click the Start button and type ‘Group Policy Editor’
- In the local group policy editor, navigate to Computer Configuration and then Administrative Templates – System
- Scroll below all the folders and Right-click on ‘Specify settings for optional component installation and component repair” policy
- In the settings, set it to enabled. Check the box to “Download repair content and optional features directly from Windows Updates instead of Windows Server Updates Services (WSUS)“
- Click on Apply and Click OK
- Right-click the Start button and select ‘Run’ Type gpupdate and then Click OK
- RSAT installation errors such as 0x80070003 are related to installation from uncommon locations. Copy the installation files to your target machine’s local drive and proceed.
While it can be straightforward to install and enable all these tools, if you are using them remotely, then it is wise to use a VPN to encrypt all your connections.
If you use a VPN server, it eliminates the chances of hackers seeing what you are doing as you configure any Active Directory on your computers using these administrative tools.
