Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

You cannot install Active Directory Domain Services (AD DS) as a domain controller on Windows 11. AD DS is a Windows Server role. On Windows 11, the supported option is to install Remote Server Administration Tools (RSAT), which lets you manage users, groups, computers, organizational units, and other directory objects on an existing domain controller.

These instructions apply to Windows 11, including version 25H2. You need Windows 11 Pro, Enterprise, Education, Pro Education, or Pro for Workstations. Windows 11 Home does not support RSAT.

What you install on Windows 11

The Active Directory component you need is:

RSAT: Active Directory Domain Services and Lightweight Directory Services Tools

Its Windows capability name is:

Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0

This package installs the Active Directory Users and Computers console and the Active Directory PowerShell module. It does not create a domain, install a domain controller, or replace Windows Server.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Check your Windows 11 edition

  1. Press Windows + R.
  2. Type winver and press Enter to check the Windows version and build.
  3. Open Settings > System > About.
  4. Look at Windows specifications > Edition.

If the edition is Windows 11 Home, RSAT cannot be installed through the supported Windows client method. Upgrade to a supported edition or manage Active Directory from another compatible administrative computer.

#1 Best Overall
Lenovo Laptop V15, AMD Ryzen 3 7320U, 16GB DDR5, 512GB SSD, Windows 11 Pro
  • EXCEPTIONAL BUSINESS VALUE - The Lenovo V15 combines a sleek design, dependable everyday performance, and MIL-STD-810H tested durability with business-ready security features. Offering many of the essential business capabilities of the ThinkPad E16 at a more affordable price, it's an ideal choice for professionals, students, and small businesses.
  • POWERFUL PERFORMANCE - Powered by the AMD Ryzen 3 7320U processor with integrated AMD Radeon 610M Graphics, this laptop delivers responsive performance for everyday computing. Combined with 16GB LPDDR5 5500MHz memory for smooth multitasking and 512GB PCIe NVMe M.2 SSD for fast boot-ups, quick file access, and ample storage, it keeps your workflow efficient from start to finish.
  • IMMERSIVE VISUAL EXPERIENCE - Enjoy sharp, vibrant visuals on the 15.6" FHD (1920 × 1080) anti-glare display, designed for comfortable viewing during work or entertainment. HDMI and USB-C support up to two external 4K monitors at 60Hz without a docking station, providing an expanded workspace for efficient multitasking. An HD webcam with a privacy shutter ensures clear video calls while protecting your privacy when the camera is not in use.
  • VERSATILE CONNECTIVITY - Stay connected with one USB-C port supporting Power Delivery and DisplayPort 1.2, two USB-A ports, HDMI 1.4, Ethernet (RJ-45), and an audio combo jack for seamless connections to monitors, peripherals, and wired networks. A full-size keyboard with a Numeric Keypad enhances data entry and everyday productivity, while built-in Wi-Fi 6 and Bluetooth 5.3 deliver fast, stable wireless connectivity for work, streaming, and daily use.
  • OPERATING SYSTEM - Preinstalled with Windows 11 Pro 64-bit and AI Copilot, this system delivers a modern, intuitive user experience with advanced security and productivity features. Built-in tools such as BitLocker encryption, Remote Desktop, and enhanced device management help protect data and simplify system administration. Seamless compatibility with a wide range of applications, peripherals, and business software ensures reliable performance for everyday computing.

Method 1: Enable Active Directory tools in Settings

  1. Open Settings from the Start menu.
  2. Go to System > Optional features.
  3. Next to Add an optional feature, select View features.
  4. Search for RSAT: Active Directory Domain Services and Lightweight Directory Services Tools.
  5. Select the checkbox beside the result, then select Next.
  6. Select Add and wait for Windows to complete the installation.

Windows normally downloads the optional-feature files through Windows Update, so the computer needs network access. On a company-managed computer, your administrator may have restricted optional features or configured an internal servicing source.

You can open the relevant Settings page directly by pressing Windows + R, entering the following URI, and selecting OK:

ms-settings:optionalfeatures

On some older Windows 11 builds, Optional features may appear under Settings > Apps instead of Settings > System.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Method 2: Install the Active Directory tools with PowerShell

Use Windows PowerShell with administrator privileges. Right-click Start, choose Terminal (Admin) or Windows PowerShell (Admin), and approve the User Account Control prompt.

1. Check the capability

Get-WindowsCapability -Online -Name 'Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0'

If the tools are not installed, the result normally shows:

State : NotPresent

2. Install the capability

Add-WindowsCapability -Online -Name 'Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0'

A successful installation normally reports Online : True. If RestartNeeded is True, restart Windows before testing the tools.

Rank #2
Lenovo V15 Gen 4 Business Laptop, 15.6" FHD Display, Intel Core i5-13420H (Beat i7-1355U), HDMI, RJ45, Webcam, Numeric Keypad, Wi-Fi, Windows 11 Pro, Black (16GB RAM | 512GB SSD)
  • [High Speed RAM And Enormous Space] 4GB high-bandwidth RAM to smoothly run multiple applications and browser tabs all at once; 128GB PCIe NVMe M.2 Solid State Drive allows to fast bootup and data transfer
  • [Processor] Intel Core i5-13420H Processor (8 Cores, 12 Threads, 12MB Intel Smart Cache, Base at 1.5 GHz, Up to 4.6 GHz Max Turbo Frequency), with Intel UHD Graphics
  • [Display] 15.6" FHD (1920 x 1080) Display
  • [Tech Specs] 1 x USB 3.0 Type-A, 1 x USB 2.0 Type-A, 1 x USB Type-C, 1 x HDMI, 1 x RJ45, 1 x headphone/microphone combo, Webcam, Numeric Keypad, Wi-Fi and Bluetooth
  • [Operating System] Windows 11 Pro - Organize open apps with pre-configured layouts to optimize productivity, Navigate with more intuitive experience to get things done, Collaborate with teams with more features

3. Confirm the installation

Get-WindowsCapability -Online -Name 'Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0'

The expected result is:

State : Installed

Test the PowerShell module with:

Import-Module ActiveDirectory
Get-Command -Module ActiveDirectory

This should return Active Directory cmdlets such as Get-ADUser, Get-ADComputer, and Get-ADGroup.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Open Active Directory Users and Computers

After installation, open Start > Windows Tools and select Active Directory Users and Computers. You can also press Windows + R, enter:

dsa.msc

When prompted, connect using an account with suitable permissions. The PC must be able to resolve the domain through DNS and communicate with a domain controller. Installing RSAT alone does not join the PC to the domain.

Install other AD administration tools

The AD DS and AD LDS package is separate from several other RSAT packages. Install only the tools you need.

Tool PowerShell capability
Group Policy Management Rsat.GroupPolicy.Management.Tools~~~~0.0.1.0
DNS Server Tools Rsat.Dns.Tools~~~~0.0.1.0
DHCP Server Tools Rsat.DHCP.Tools~~~~0.0.1.0

For example, install Group Policy Management with:

Add-WindowsCapability -Online -Name 'Rsat.GroupPolicy.Management.Tools~~~~0.0.1.0'

Install DNS and DHCP tools separately:

Add-WindowsCapability -Online -Name 'Rsat.Dns.Tools~~~~0.0.1.0'
Add-WindowsCapability -Online -Name 'Rsat.DHCP.Tools~~~~0.0.1.0'

Arm64 limitation in Windows 11 25H2

On some Windows 11 25H2 Arm64 installations, RSAT Features on Demand are not supported through the normal capability-installation mechanism. If Add-WindowsCapability fails on an Arm64 device, check the available Windows features instead:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Open Control Panel.
  2. Go to Programs > Programs and Features.
  3. Select Turn Windows features on or off.
  4. Look for the available RSAT Active Directory tools and enable them.

Microsoft lists the AD DS and AD LDS tools among the RSAT snap-ins available through this route on supported Arm64 configurations. To check the architecture, go to Settings > System > About and review System type.

Rank #3
HP New 15.6 inch Laptop Computer, 2025/2026 Edition, Intel High-Performance 4 cores N100 CPU, 16GB RAM, 512GB SSD, Long Battery Life, Ultra-Quiet Design, Windows 11 Pro with Microsoft Office
  • 【Display】The 15.6" 250nits Non-Touch Anti-glare, 45% NTSC LED display has a thin bezel and 85% screen-to-body ratio, which provides a comfortable viewing space for your videos, photos, and documents. Paired with Intel UHD Graphics, making the display colors more vivid and delicate

Install RSAT from offline media

If the PC cannot use Windows Update, an administrator can install the capability from matching Features on Demand media:

Add-WindowsCapability -Online `
  -Name 'Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0' `
  -Source 'D:LanguagesAndOptionalFeatures' `
  -LimitAccess

Replace the source path with the location containing the Features on Demand files. The media must match the installed Windows version, system architecture, and required language. The -LimitAccess parameter prevents Windows from contacting Windows Update. Using it without a complete, matching source usually causes installation to fail.

Fix common installation problems

The Active Directory feature is not listed

Check the following:

  • The edition is not Windows 11 Home.
  • The device is not an Arm64 system affected by the RSAT Features on Demand limitation.
  • Windows Update or the configured Features on Demand source is reachable.
  • An organization policy has not hidden Windows optional features.

A relevant policy is located in User Configuration > Administrative Templates > Control Panel > Programs > Hide “Windows Features”. On managed devices, contact the administrator rather than changing policy settings yourself.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Add-WindowsCapability returns a source or download error

This usually means Windows cannot obtain the optional-feature payload. Common causes include unavailable Windows Update, a WSUS configuration that does not provide the required content, an incorrect Features on Demand source, or mismatched installation media.

Administrators should also review:

Computer Configuration > Administrative Templates > System > Specify settings for optional component installation and component repair

That policy can define an alternate source and control whether Windows downloads missing components from Windows Update.

Rank #4
Dell Latitude 5420 14" FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
  • 256 GB SSD of storage.
  • Multitasking is easy with 16GB of RAM
  • Equipped with a blazing fast Core i5 2.00 GHz processor.

The tools install but cannot find the domain

RSAT is only a management client. Confirm that:

  • The PC is connected to the corporate network or VPN.
  • The PC uses the domain’s DNS servers.
  • The domain controller is reachable over the network.
  • The signed-in account has permission to perform the requested operation.
  • Firewall and routing rules allow the required Active Directory traffic.

Installing RSAT does not automatically join Windows 11 to a domain. To join it, use Settings > System > About > Related links > Domain or workgroup, where available, or the organization’s normal domain-join process.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The module fails in PowerShell 7

The Active Directory module is a Windows PowerShell module. If it works in Windows PowerShell but not in PowerShell 7, open Windows PowerShell from the Start menu and run the command there. RSAT installation does not guarantee that every Windows PowerShell management module runs natively in PowerShell 7.

What not to install

Do not download the old KB2693643 RSAT package for Windows 11. That package belongs to older Windows releases. Current Windows 11 versions install RSAT as Windows capabilities through Optional features or Add-WindowsCapability.

Also, do not use the Windows Server command:

Install-WindowsFeature

That command is for Windows Server. On Windows 11, use the Settings method or Add-WindowsCapability.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

FAQ

Can Windows 11 be turned into an Active Directory domain controller?

No. Active Directory Domain Services is a Windows Server role. Windows 11 can install RSAT tools to remotely manage an existing domain controller, but it cannot host AD DS as a domain controller.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Does Windows 11 Home support Active Directory tools?

No. Microsoft supports RSAT on Windows 11 Pro, Enterprise, Education, Pro Education, and Pro for Workstations. Windows 11 Home is not supported.

Best Value
2026 Laptops Computer,15.6" Windows 11 Pro Laptop with Office 365 included,8GB RAM 256GB SSD,Intel Pentium Process,6H Battery,Mini HDMI,cam|Mic,Portable Thin Lap Top for College Student Business Work
  • 【Unbeatable Assurance & Support for Your Laptop】Shop with confidence on this laptop on sale, backed by a 2-Year Warranty & 6-Month Return Policy. Get 24/7 online support and direct help at 800‑606‑1179 for peace of mind.
  • 【Ready-to-Use System - Windows 11 Pro Laptop】Out-of-the-box productivity: This Windows 11 Pro laptop comes fully equipped with Windows 11 Pro and Office 365—no setup required, ready for work or study.
  • 【Immersive 15.6" Display on Traditional Laptop Computers】Experience sharp, vibrant visuals on a 15.6-inch 1920×1080 IPS screen. This traditional laptop computer offers wide viewing angles perfect for work, streaming, and learning.
  • 【Up to 6-Hour All-Day Battery Life for Laptops】Stay powered on the go with a 5000mAh battery supporting up to 6 hours of mixed use. An ideal laptop for business trips, classes, and daily mobility.
  • 【180° Hinge Design - Flexible Use for Laptop Computer Windows 11】The 180° hinge allows the screen to lay flat, perfect for sharing content in team meetings. The integrated webcam, mic, and speakers ensure clear communication on every call—great for business work and college student use.

Which RSAT package installs Active Directory Users and Computers?

Install “RSAT: Active Directory Domain Services and Lightweight Directory Services Tools.” Its capability name is Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0.

Why can I open Active Directory Users and Computers but not see my domain?

RSAT does not create a domain connection. Check the PC’s DNS settings, VPN or network connection, access to a domain controller, firewall rules, and your account permissions.

Can I install RSAT without internet access?

Yes, but you need matching Windows Features on Demand media. Use Add-WindowsCapability with the correct local source and -LimitAccess. The source must match the Windows version, architecture, and language.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The Bottom Line

To enable Active Directory management on Windows 11, install RSAT: Active Directory Domain Services and Lightweight Directory Services Tools from Settings > System > Optional features, or run:

Add-WindowsCapability -Online -Name 'Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0'

Use the tools to administer an existing Windows Server domain. They do not turn Windows 11 into a domain controller.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.