Installing Active Directory Users and Computers MMC Snap-in on Windows 10

One of the main Active Directory domain management tools is the MMC (Microsoft Management Console) snap-in Active Directory Users and Computers (ADUC). The ADUC snap-in is used to perform typical domain administration tasks and manage users, groups, computers, and Organizational Units in the Active Directory domain. By default, the Active Directory Users and Computers (dsa.msc) console is installed on a Windows Server host, when it’s promoted to the domain controller during the Active Directory Domain Services (AD DS) role installation.

To use ADUC snap-in in Windows 10, first, you need to install the Remote Server Administration Tools (RSAT). The RSAT includes various command-line tools, PowerShell modules, and graphical snap-ins to remote manage Windows Servers, Active Directory, and other Windows roles and features, which are running on Windows Server.

How to Install Active Directory Users and Computers (dsa.msc) on Windows 10?

By default, RSAT is not installed in Windows 10 (and other Windows desktop operating systems). Remote Server Administration Tools (RSAT) allows IT administrators to remotely manage roles and components on Windows Server 2019, 2016, 2012 R2, 2012, 2008 R2 from user’s workstations running Windows 10, 8.1, 8, and Windows 7. The RSAT resembles Windows Server 2003 Administration Tools Pack (adminpak.msi) that was installed on clients running Windows 2003 or Windows XP and was used for remote server management. RSAT can’t be installed on computers with the Home editions of Windows, you must have Professional or Enterprise.

Depending on Windows 10 build, the ADUC console installation differs.

Installing ADUC in Windows 10 1809 and Newer

In Windows 10 1809 and newer builds, the RSAT pack is added to the Features on Demand (FoD). In order to install ADUC, you can add an optional feature from FoD.

  1. Press the Start menu > Settings > Apps;
  2. Select Manage Optional Features > Add features;
  3. In the list of optional features already installed on your Windows 10 desktop, select RSAT: Active Directory Domain Services and Lightweight Directory Tools, and press Install.

dsa.msc

After the RSAT installation completes, you need to restart your computer.

Install ADUC Using Command Prompt

Also, you can install the Active Directory console using the DISM tool. To verify that the RSAT ActiveDirectory component is installed, open a command prompt as an administrator, and run the command:

DISM.exe /Online /Get-CapabilityInfo /CapabilityName:Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0

Capability Identity : Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0
Name : Rsat.ActiveDirectory.DS-LDS.Tools
State : Not Present
Display Name : RSAT: Active Directory Domain Services and Lightweight Directory Services Tools
Description : Active Directory Domain Services (AD DS) and Active Directory Lightweight Directory Services (AD LDS) Tools include snap-ins and command-line tools for remotely managing AD DS and AD LDS on Windows Server.
Download Size : 5.23 MB
Install Size : 17.35 MB

active directory users and computers

The screenshot above shows the RSAT Active Directory feature is not installed. To install, you need to run the command:

DISM /Online /Add-Capability /CapabilityName:Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0

active directory users and computers windows 10

Now check the status of AD RSAT. It should be changed to State: Installed.

dsa.msc windows 10

Hint. You can also use PowerShell commands to install the Active Directory console.

Get RSAT Active Directory component status:

Get-WindowsCapability -Online | Where-Object {$_.Name -like "RSAT.ActiveDirectory*"}

Install it:

Add-WindowsCapability -Online -Name Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0

active directory snap in

RSAT components are downloaded over the Internet from Windows Update servers. If you want to install RSAT in a disconnected environment (without Internet access), you need to download the Feature on Demand (FoD) ISO image for your Windows 10 release. FoD DVD media is available for download from your Volume License Servicing Center (VLSC) or on my.visualstudio.com.

READ ALSO  Using Application Bundles in MDT 2013

mmc active directory

To install ADUC offline, you need to mount the FoD iso image to a virtual drive (for example, to drive F:\) and run the installation from local media:

Dism.exe /online /add-capability /source:F: /Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0

How to Enable Active Directory Tools in Windows 10?

It remains to activate the necessary RSAT function. To do this:

  1. Right-click on the Start button and select Control Panel;
  2. Select Programs and Features;
  3. In the left pane press on Turn Windows features on or off;
  4. Expand node Remote Server Administration Tools > Role Administration Tools > AD DS and AD LDS Tools;
  5. Check item AD DS Tools and press OK.

active directory users and computers snap-in

However, you can install the AD feature from the command prompt with administrator privileges using the following commands:

dism /online /enable-feature /featurename:RSATClient-Roles-AD

dism /online /enable-feature /featurename:RSATClient-Roles-AD-DS

dism /online /enable-feature /featurename:RSATClient-Roles-AD-DS-SnapIns

install dsa.msc

How to Run dsa.msc (Active Directory Users and Computers) on Windows 10?

After AD Management snap-ins are installed, go to the Control Panel and select the section Administrative Tools. As you can see, a new link to the console %SystemRoot%\system32\dsa.msc (Active Directory Users and Computers) appeared.

active directory mmc

Now you can run the ADUC snap-in and connect to any available AD domain controller. If your computer is joined to the Active Directory domain, then the nearest domain controller in your AD site will be selected automatically, based on your Logon server. Also to start the ADUC console, you can press the Win+R combination, type dsa.msc, and then click OK.

active directory windows 10

DSA.msc: Connecting to DC From Non-domain Computer

If you want to connect to AD using dsa.msc snap-in from a non-domain computer, you must:

  1. Open Command prompt and run command:
    runas /netonly /user:Domain_Name\Domain_USER mmc
  2. In the empty MMC Console select File > Add/Remove Snap-In;
  3. Add Active Directory Users and Computers Snap-In to the right pane and press OK;
    install active directory users and computers
  4. Connect to the domain with right-click on ADUC > Connect to the domain and enter the domain name.
    windows active directory tools

 As a result, in the ADUC snap-in appears the structure of your OU Active Directory domain.

aduc

You will see a standard set of AD Organizational Units and containers:

  • Saved Queries — saved search criteria, allows quickly replay the previous search in Active Directory (LDAP filters supported);
  • Builtin — built-in user accounts;
  • Computers — default container for computer accounts;
  • Domain Controllers — default container for domain controllers;
  • ForeignSecurityPrincipals — contains information about objects from trusted external domains. Typically, these objects are created when an object from an external domain is added to the group of the current domain;
  • Users — default container for user accounts.
READ ALSO  Using DCPromo to Promote AD Domain Controllers

When choosing the OU, you will see a list of objects that are in it. The ADUC console may display security groups, contacts, users, and computers.

Depending on the domain structure, the ADUC console may contain other containers. Some AD folders are not displayed by default. To display them, select View > Advanced Features in the top menu.

active directory tools windows 10

The following additional folders should appear:

  • LostAndFound — directory objects, that lost the owner;
  • NTDS Quotas — data about the quoting of the directory service;
  • Program Data — data stored in the directory service for Microsoft applications;
  • System — the built-in system parameters.

You can add organizational units to the AD tree by yourself.

In the ADUC console, you can perform the following actions:

  1. Create and manage user accounts, computers, and security groups;
  2. View AD object attributes;
  3. Change and reset user passwords;
  4. Create organizational units and build hierarchical structures for AD objects. In the future, you can delegate administrative permission on these OUs to other domain users (without granting domain administrator privileges).
  5. Raise domain functional level, transfer FSMO roles to another domain controller.

Installing ADUC in Windows 10 Version 1803 and Below

  1. You can download the Remote Server Administration Tools for Windows 10 (version: 1803 1.0, Date Published: 5/2/2018) using the following link.
    Tip. As you can see, the RSAT package is available for the latest version of Windows 10 1803. WindowsTH-RSAT_WS_1709 and WindowsTH-RSAT_WS_1803 are used to manage Windows Server 2016 1709 and 1803 respectively. If you use a previous version of Windows Server 2016 or Windows Server 2012 R2/2012/2008 R2, then use the WindowsTH-RSAT_WS2016 package.
    install active directory users and computers windows 10
  2. Select Language of your Windows 10 version and click on the Download button. Depending on the bitness of your OS, select the desired *.msu file:
    For Windows 10 x86 – download WindowsTH-RSAT_WS2016-x86.msu (69.5 MB);
    For Windows 10 x64 – download WindowsTH-RSAT_WS2016-x64.msu (92.3 MB);
    windows 10 active directory users and computers
  3. Install the downloaded file (Update for Windows KB2693643) by double-clicking on it.
    active directory users and computers mmc
  4. You can install RSAT from the Command prompt in the silent mode:
    wusa.exe c:\Install\WindowsTH-RSAT_WS2016-x64.msu /quiet /norestart

If when installing RSAT the error message This update does not qualify for your computer appears, most likely you are using Windows 10 Home or Single-Language edition (you need a Pro or Enterprise edition).

Dsa.msc: Missing Tabs in Windows 10

Users sometimes complain that some tabs are missing in the ADUC snap-in on Windows 10.

install active directory windows 10

  • At first, check if Advanced Features is selected in the AD view;
  • Check if you use the latest Windows 10 version;
  • Before installing RSAT, make sure you removed old versions of RSAT and RSAT editions for other languages. At the same time, only one version of Remote Server Administration can be installed on the computer;
  • Currently, RSAT for Windows 10 is only available in English (United States) language. If you have a localized version of Windows 10 installed, make sure you have installed the English (United States) language pack before installing RSAT. Move English (United States) to the top of the list of preferred languages;
  • In some cases, copying of the tsuserex.dll and tsuserex.dll.mui libraries manually from Windows Server 2012 R2 to the Windows 10 computers (to the C:\Windows\System32 directory) helps. Do not forget to register the library with the command:
    regsvr32 c:\Windows\System32\tsuserex.dll

How to Add Custom Commands and Views to the Active Directory Console?

You can add your own tools and commands to the Active Directory Users and Computers console to launch external applications.

READ ALSO  How to Deploy Microsoft Office 2016 with SCCM 2012 R2?

Create a new text file named ping.bat with the following text and save it to a local disk:

@echo off

Title ping [%1]

Ping.exe %1 –t -8

pause

Create a custom view for the ADUC console:

  1. Run the command:
    mmc.exe
  2. Select File > Add/remove snap-in;
  3. In the list of available snap-ins, select Active Directory Users and Computers and press Add;
    windows 10 active directory tools
  4. Select a container with computers or servers, right-click on it and select New Taskpad View;
    active directory snap in windows 10
  5. Press Next;
  6. Select result pane style – Vertical list, List Size – Medium and press Next > Next;
    ad snapin
  7. Specify the taskpad view name: Computer Tools;
    dsa msc
  8. In the New Task Wizard window, specify that you want to create a Shell command;
    mmc active directory users and computers
  9. In the Command field, specify “C:\PS\ping.bat”, in the Parameters field > $COL<0> (computername field);
    mmc add active directory users and computers
  10. Input the Task Name and select icon;
    mmc active directory snap in windows 10
  11. Press Next > Finish.

Now, if you select the Computer object in the ADUC console, the Ping button appears in the list of available actions. By clicking this button, you will check the computer’s availability via ICMP protocol (ping).

install active directory

This way you can add various administration tools to the ADUC console.

active directory users and computers windows 10 1909

Don’t forget to save your custom ADUC view with additional tools to a separate file custom_aduc_with_tools.msc (File > Save as). Use this file instead dsa.msc to run the ADUC console.

Cyril Kardashevsky

6 comments

  1. Found your well-written article on AD at/near the top of my Google search after repeatedly failing to see the traditional path in W10’s “Turn Settings On/Off”. Thanks for sharing your knowledge.

  2. Do you know how I can create a console with the multiple ADUC snapins but each configured to separate domain? I’ve done this and saved the console but each time I launch the saved mmc it sets each ADUC snapin to the domain of the current logged in user. I can then obviously change domain and checking the saved mmc I can see the correct reference to the domain but each launch it seems to reset.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.