Ane of the master Agile Directory domain direction tools is the MMC (Microsoft Management Console) snap-in Active Directory Users and Computers (ADUC). The ADUC snap-in is used to perform typical domain assistants tasks and manage users, groups, computers, and Organizational Units in the Active Directory domain. By default, the Agile Directory Users and Computers (dsa.msc) console is installed on a Windows Server host, when it'south promoted to the domain controller during the Active Directory Domain Services (AD DS) role installation.

To use ADUC snap-in in Windows 10/11, yous demand to install the Remote Server Assistants Tools (RSAT). The RSAT includes various command-line tools, PowerShell modules, and graphical snap-ins to remote manage Windows Servers, Active Directory, and other Windows roles and features, which are running on Windows Server.

How to Install Active Directory Users and Computers (dsa.msc) on Windows x?

By default, RSAT is not installed in Windows 10 (and other Windows desktop operating systems). Remote Server Administration Tools (RSAT) allows administrators to remotely manage roles and components on Windows Server 2019, 2016, 2012 R2, 2012, 2008 R2 from user's workstations running Windows x, 8.1, 8, and Windows 7. The RSAT resembles Windows Server 2003 Administration Tools Pack (adminpak.msi) that was installed on clients running Windows 2003 or Windows XP and was used for remote server management. RSAT can't exist installed on computers with the Home editions of Windows, you must accept Professional or Enterprise.

Depending on Windows 10 build, the ADUC console installation differs.

Installing ADUC in Windows 10 1809 and Newer

In Windows ten 1809 and newer builds, the RSAT pack is added to the Features on Need (FoD). In order to install ADUC, you can add an optional feature from FoD.

  1. Printing the Start menu > Settings > Apps;
  2. Select Manage Optional Features > Add features;
  3. In the list of optional features already installed on your Windows 10 desktop, select RSAT: Agile Directory Domain Services and Lightweight Directory Tools, and press Install.
    dsa.msc

Afterward the RSAT installation completes, you need to restart your reckoner.

Install ADUC Using Command Prompt

Too, you tin can install the Active Directory console using the DISM tool. To verify if=_p9.7im5yb3eqa the RSAT ActiveDirectory component is installed, open up a command prompt every bit an administrator, and run the control:

DISM.exe /Online /Get-CapabilityInfo /CapabilityName:Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0

Capability Identity : Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0
Proper noun : Rsat.ActiveDirectory.DS-LDS.Tools
State : Not Nowadays
Brandish Name : RSAT: Active Directory Domain Services and Lightweight Directory Services Tools
Description : Active Directory Domain Services (Advertising DS) and Active Directory Lightweight Directory Services (Advert LDS) Tools include snap-ins and command-line tools for remotely managing Ad DS and AD LDS on Windows Server.
Download Size : 5.23 MB
Install Size : 17.35 MB

dsa.msc windows 10

The screenshot above shows the RSAT Active Directory feature is non installed. To install, yous need to run the command:

DISM /Online /Add together-Adequacy /CapabilityName:Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0

active directory snap in

Now bank check the status of AD RSAT. Information technology should be changed to Country: Installed.

install dsa.msc

Hint. You can also employ PowerShell commands to install the Active Directory console.

Get RSAT Agile Directory component status:

Become-WindowsCapability -Online | Where-Object {$_.Name -like "RSAT.ActiveDirectory*"}

Install it:

Add-WindowsCapability -Online -Name Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.i.0

mmc active directory

RSAT components are downloaded over the Internet from Windows Update servers. If you desire to install RSAT in a disconnected environment (without Net access), you lot need to download the Feature on Demand (FoD) ISO image for your Windows 10 release. FoD DVD media is available for download from your Volume License Servicing Middle (VLSC) or on my.visualstudio.com.

active directory mmc

To install ADUC offline, you lot need to mount the FoD iso image to a virtual drive (for example, to drive F:) and run the installation from local media:

Dism.exe /online /add-capability /source:F: /Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0

How to Enable Agile Directory Tools in Windows 10?

It remains to activate the necessary RSAT function. To exercise this:

  1. Right-click on the Start button and select Control Panel;
  2. Select Programs and Features;
  3. In the left pane press on Turn Windows features on or off;
  4. Aggrandize node Remote Server Assistants Tools > Function Administration Tools > Advertizement DS and Advertisement LDS Tools;
  5. Cheque detail Advertisement DS Tools and press OK.

active directory users and computers

Still, you can install the Ad feature from the command prompt with administrator privileges using the following commands:

dism /online /enable-feature /featurename:RSATClient-Roles-Advertisement  dism /online /enable-feature /featurename:RSATClient-Roles-AD-DS  dism /online /enable-feature /featurename:RSATClient-Roles-AD-DS-SnapIns

active directory users and computers snap-in

How to Install RSAT Active Directory on Windows xi?

You tin can also install RSAT Active Directory on Windows 11. You can't install RSAT on devices running Windows 11 Domicile edition. RSAT is only available for Windows 11 Pro and Enterprise. In that location are several ways to install the Active Directory snap-in on Windows 11.

On a Windows 11 workstation, you lot can install RSAT via Optional Features (FoD).

  1. Click Start bill of fare and go to the Settings > Apps > Optional features;
  2. Click on View Features and in the Add an optional feature window select to install RSAT: Active Directory Domain Services and Lightweight Directory Services Tools;
    active directory users and computers windows 10
  3. Click Side by side > Install.
  4. Windows xi will download the RSAT binaries from the internet.

Hint. If y'all use WSUS or SCCM on your network to install Windows Updates on client devices, you demand to enable the special GPO option. Open the local Group Policy Editor (gpedit.msc) and go to Computer Configuration > Authoritative Templates > Arrangement. Enable the GPO option Specify settings for optional component installation and component repair and tick the Download repair content and optional features directly from Windows Update instead of Windows Server Update Services (WSUS) checkbox. Update local Grouping Policy settings on the client with the gpupdate /strength command. Without this option, Windows 11 will endeavor to get RSAT from your local Windows update server (errors 0x8024402c and 0x800f081f).

active directory users and computers mmc

Too, you lot can install the Active Directory tools on Windows 11 using PowerShell. List the installed RSAT components past running the command:

Become-WindowsCapability -Name RSAT* -Online | Select-Object -Property DisplayName, State

In our case, the RSAT: Agile Directory Domain Services and Lightweight Directory Services Tools feature is not installed (Land > NotPresent).

dsa.msc install

Install the Windows feature with the command:

Add-WindowsCapability -Name Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0 -Online

In guild to run Active Directory snap-in on Windows 11, become to the Start Carte > All apps > Windows tools.

how to enable dsa.msc in windows 10

Beginning the Active Directory Users and Computers snap-in.

dsa.msc command

Note. Y'all can remove RSAT through Optional Features. If, when uninstalling the RSAT feature, there are errors with the inability to uninstall, so kick the estimator in Safe Mode and uninstall it.

How to Run dsa.msc (Active Directory Users and Computers) on Windows 10?

After AD Direction snap-ins are installed, get to the Control Console and select the section Administrative Tools. Equally yous tin see, a new link to the panel %SystemRoot%\system32\dsa.msc (Active Directory Users and Computers) appeared.

dsa.msc for windows 10

Now you can run the ADUC snap-in and connect to any bachelor AD domain controller. If your figurer is joined to the Active Directory domain, and so the nearest domain controller in your AD site volition be selected automatically, based on your Logon server. Also to start the ADUC console, yous can printing the Win+R combination, blazon dsa.msc, so click OK.

windows 10 active directory users and computers

At startup, the ADUC console automatically connects to the closest DC. If the console doesn't discover the domain controller, get the name of your LogonServer using the PowerShell command:

$env:LOGONSERVER

ad mmc

Right-click on the root in the ADUC console and select Modify Domain Controller. Select the name of your logon DC from the list.

ad snapin

Ever try to connect to the closest domain controller. When working with a domain controller at a remote site, the RSAT console may go slow.

DSA.msc: Connecting to DC from Not-domain Reckoner

If you desire to connect to Ad using dsa.msc snap-in from a non-domain computer, yous must:

  1. Open Control prompt and run the control:
    runas /netonly /user:Domain_Name\Domain_USER mmc
  2. In the empty MMC Console select File > Add/Remove Snap-In;
  3. Add together Active Directory Users and Computers Snap-In to the correct pane and press OK;
    mmc snap in active directory
  4. Connect to the domain with correct-click on ADUC > Connect to the domain and enter the domain name.
    mmc active directory users and computers

As a result, the structure of your OU Agile Directory domain appears in the ADUC snap-in.

how to install dsa.msc

Y'all will see a standard prepare of Advert Organizational Units and containers:

  • Saved Queries — saved search criteria, allows speedily replay the previous search in Active Directory (LDAP filters supported);
  • Builtin — built-in user accounts;
  • Computers — default container for computer accounts;
  • Domain Controllers — default container for domain controllers;
  • ForeignSecurityPrincipals — contains information about objects from trusted external domains. Typically, these objects are created when an object from an external domain is added to the group of the current domain;
  • Users — default container for user accounts.

When choosing the OU, y'all will come across a list of objects that are in it. The ADUC console may display security groups, contacts, users, and computers.

Depending on the domain structure, the ADUC panel may contain other containers. Some Advert folders are not displayed past default. To display them, select View > Avant-garde Features in the top menu.

active directory mmc snap in

The following additional folders should appear:

  • LostAndFound — directory objects, that lost the owner;
  • NTDS Quotas — data near the quoting of the directory service;
  • Programme Data — data stored in the directory service for Microsoft applications;
  • System — the built-in system parameters.

You can add together organizational units to the AD tree past yourself.

In the ADUC console, y'all can perform the following actions:

  1. Create and manage user accounts, computers, and security groups;
  2. View AD object attributes;
  3. Change and reset user passwords;
  4. Create organizational units and build hierarchical structures for Advertizing objects. In the future, yous can delegate administrative permission on these OUs to other domain users (without granting domain administrator privileges).
  5. Raise domain functional level, transfer FSMO roles to another domain controller.

Installing ADUC in Windows ten Version 1803 and Below

  1. You lot can download the Remote Server Assistants Tools for Windows ten (version: 1803 one.0, Appointment Published: 5/2/2018) using the post-obit link.

    Tip. Every bit you can see, the RSAT parcel is available for the version of Windows 10 1803. WindowsTH-RSAT_WS_1709 and WindowsTH-RSAT_WS_1803 are used to manage Windows Server 2016 1709 and 1803 respectively. If you utilize a previous version of Windows Server 2016 or Windows Server 2012 R2/2012/2008 R2, then use the WindowsTH-RSAT_WS2016 package.

  2. Select the Language of your Windows 10 version and click on the Download button. Depending on the bitness of your OS, select the desired *.msu file:
    For Windows x x86 – download WindowsTH-RSAT_WS2016-x86.msu (69.5 MB);
    For Windows 10 x64 – download WindowsTH-RSAT_WS2016-x64.msu (92.iii MB);
  3. Install the downloaded file (Update for Windows KB2693643) past double-clicking on it.
    windows 10 dsa.msc
  4. Y'all can install RSAT from the Command prompt in the silent mode:
    wusa.exe c:\Install\WindowsTH-RSAT_WS2016-x64.msu /quiet /norestart

If when installing RSAT the error message This update does non qualify for your computer appears, well-nigh likely you are using Windows 10 Habitation or Unmarried-Language edition (you need a Pro or Enterprise edition).

Dsa.msc: Missing Tabs in Windows 10

Users sometimes mutter that some tabs are missing in the ADUC snap-in on Windows 10.

mmc ad

  • At commencement, bank check if Advanced Features is selected in the Advert view;
  • Bank check if y'all utilise the latest Windows ten version;
  • Before installing RSAT, make sure you removed old versions of RSAT and RSAT editions for other languages. At the aforementioned time, only one version of Remote Server Administration can be installed on the computer;
  • Currently, RSAT for Windows 10 is only available in English language (United states) language. If you have a localized version of Windows ten installed, make sure y'all have installed the English (Usa) language pack before installing RSAT. Move English (U.s.) to the top of the list of preferred languages;
  • In some cases, copying of the tsuserex.dll and tsuserex.dll.mui libraries manually from Windows Server 2012 R2 to the Windows x computers (to the C:\Windows\System32 directory) helps. Practise not forget to register the library with the control:
    regsvr32 c:\Windows\System32\tsuserex.dll

How to Add together Custom Commands and Views to the Active Directory Console?

You can add your own tools and commands to the Active Directory Users and Computers console to launch external applications.

Create a new text file named ping.bat with the post-obit text and save it to a local disk:

@echo off  Title ping [%one]  Ping.exe %ane –t -8  pause

mmc add active directory users and computers

Create a custom view for the ADUC console:

  1. Run the command:
    mmc.exe
  2. Select File > Add/remove snap-in;
  3. In the list of available snap-ins, select Active Directory Users and Computers and press Add;
    active directory msc
  4. Select a container with computers or servers, right-click on it and select New Taskpad View;
    how to add active directory snap in windows 10
  5. Printing Next;
  6. Select result pane style – Vertical list, List Size – Medium and press Side by side > Side by side;
    active directory snap-in windows 10
  7. Specify the taskpad view name: Computer Tools;
    active directory users and computers mmc snap-in
  8. In the New Chore Wizard window, specify that you want to create a Shell command;
    ad users and computers snap in
  9. In the Control field, specify "C:\PS\ping.bat", in the Parameters field > $COL<0> (computername field);
    active directory snapin
  10. Input the Job Name and select icon;
    ad snap in
  11. Printing Side by side > Finish.

Now, if you select the Figurer object in the ADUC panel, the Ping button appears in the listing of bachelor deportment. By clicking this button, y'all will check the computer's availability via ICMP protocol (ping).

enable dsa.msc in windows 10

This way you can add together various assistants tools to the ADUC panel.

dsa.msc missing

Don't forget to save your custom ADUC view with additional tools to a separate file custom_aduc_with_tools.msc (File > Salve as). Utilise this file instead dsa.msc to run the ADUC console.

  • Writer
  • Recent Posts

Cyril Kardashevsky

I enjoy applied science and developing websites. Since 2012 I'thousand running a few of my own websites, and share useful content on gadgets, PC administration and website promotion.

Cyril Kardashevsky