Active Directory Users and Computers (ADUC) is included with Microsoft’s RSAT package for Active Directory Domain Services and Lightweight Directory Services. On Windows 11 Pro or Enterprise, install it as a Windows capability, then launch the console with dsa.msc.
To manage a domain, the client computer must be joined to that domain, have network connectivity to it, and use an account with suitable Active Directory permissions. Installing ADUC does not install Active Directory on the PC.
Before you install ADUC
| Requirement | What to check |
|---|---|
| Windows edition | Windows 11 Pro or Enterprise. Home is not listed as supported for RSAT. |
| Local permissions | You need administrator privileges to install the capability. |
| Network and domain access | The PC must be joined to the domain you intend to manage and able to reach its directory service. |
| Domain permissions | Your account needs permission to perform the tasks you intend to carry out. |
To check your edition, open Settings > System > About and look under Windows specifications. Installing ADUC adds a client-side management console; it does not create a domain or turn the PC into a domain controller.
Install ADUC from Optional Features
- Open Start, search for Optional Features, and open the system setting.
- Select View features or, in some versions, Add a feature.
- Search for RSAT: Active Directory Domain Services and Lightweight Directory Services Tools.
- Select the package, choose Next, then select Install.
You can also open Settings > System > Optional features. ADUC is part of the larger AD DS and AD LDS tools package; it is not a separate Optional Features item named “Active Directory Users and Computers.”
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minute#1 Best Overall
After installation, open Start > Windows Tools, search Start for the console, or run dsa.msc.
Install ADUC with PowerShell
Open PowerShell or Terminal as administrator and run:
Add-WindowsCapability -Online -Name Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0
A successful installation can report Online: True and RestartNeeded: False. A restart is not inherently required, but restart if Windows requests one.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Check the RSAT capability state
In an elevated PowerShell window, run:
Get-WindowsCapability -Online | Where-Object Name -like ‘RSAT*’
An uninstalled AD package has the name Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0 and state NotPresent. After installation, its state should be Installed. The AD DS and AD LDS tools list Rsat.ServerManager.Tools as a dependency, which Windows normally handles during installation.
Open Active Directory Users and Computers
- Press Windows key + R.
- Enter dsa.msc.
- Press Enter.
You can also search Start for Active Directory Users and Computers or open Start > Windows Tools. If Windows cannot find dsa.msc, the AD DS and AD LDS RSAT package may not be installed or may not have installed successfully.
Use ADUC against a domain
The client computer must be joined to the domain you want to manage. Installing the console alone does not provide domain access. Your account must also have permission for the actions you intend to perform. Domain Admins and Enterprise Admins can manage user, group, and computer accounts by default. Account Operators can create, modify, and delete user accounts, but do not have the same default rights to manage groups or permissions. Organizations may delegate narrower permissions instead of granting broad administrator membership.
Free tools Windows power users keep installed
One-click scans. No signup required.
ADUC normally connects to the domain associated with the signed-in account. To manage another domain or directory context, right-click the console root, choose Connect to Domain, and enter or browse for the domain name.
Install ADUC with DISM from a Feature on Demand source
RSAT is delivered as a Windows Feature on Demand. For managed computers using an internal repository or staged Windows installation content, DISM can add the capability. Microsoft’s sample package is named Microsoft-Windows-ActiveDirectory-DS-LDS-Tools-FoD-Package~31bf3856ad364e35~amd64~~.cab and has satellite packages, so use the capability-based DISM command rather than treating the CAB as an isolated application.
With a suitable Feature on Demand source available, run:
DISM /Online /Add-Capability /CapabilityName:Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0 /Source:D:FoD /LimitAccess
Replace D:FoD with the path to a source matching the Windows build and architecture. An incompatible source can cause servicing errors or leave the capability unavailable. Omit /LimitAccess only when Windows may obtain the content through its configured servicing source.
Windows 11 25H2 ARM64 exception
Microsoft states that RSAT Feature on Demand packages are not supported on Windows 11 version 25H2 ARM64. The normal Optional Features entry or Add-WindowsCapability command may fail or the expected capability may be unavailable on this platform.
For this platform, Microsoft directs users to Control Panel > Programs > Programs and Features > Turn Windows features on or off. Verify the Windows version and system type before retrying the standard capability installation.
Common ADUC installation problems
The feature is missing from Optional Features
Confirm that the computer runs Windows 11 Pro or Enterprise and that it is not the 25H2 ARM64 case. On managed devices, policy or servicing configuration may restrict Features on Demand sources or access to Windows Update. Check the capability state with Get-WindowsCapability -Online | Where-Object Name -like ‘RSAT*’. If needed, try the elevated PowerShell installation command or ask the Windows servicing administrator for a matching Feature on Demand source.
Recommended Free Tools
Add-WindowsCapability returns an error
Possible causes include a non-elevated PowerShell window, Windows 11 Home, an unavailable or mismatched Features on Demand source, or the Windows 11 25H2 ARM64 limitation. Confirm the capability name and review the Windows error code. Do not substitute the old Windows 10 RSAT download for the current Windows 11 capability-based installation.
dsa.msc opens, but the domain cannot be reached
Check that:
- the PC is joined to the correct domain;
- the PC is connected to the corporate network or VPN;
- DNS points to domain DNS servers;
- a domain controller is available; and
- the signed-in account has permission for the requested operation.
ADUC can be installed while domain administration remains unavailable because of connectivity, DNS, domain-controller, membership, or permission problems.
Searching for ADUC finds nothing
Search for Active Directory Users and Computers, run dsa.msc, or open Start > Windows Tools. The package to install is RSAT: Active Directory Domain Services and Lightweight Directory Services Tools.
What not to download
Do not follow old instructions to download KB2693643 for Windows 11. Microsoft’s current method uses Features on Demand through Optional Features, PowerShell, or DISM. Also, RSAT: Active Directory Certificate Services Tools is a different package and does not supply ADUC.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Video: enable ADUC on Windows 11
The installation sequence is to open Optional Features, add RSAT: Active Directory Domain Services and Lightweight Directory Services Tools, then run dsa.msc. A walkthrough should also note the Pro and Enterprise requirement and the 25H2 ARM64 limitation.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.FAQ
Can I install Active Directory Users and Computers on Windows 11 Home?
Microsoft’s current RSAT prerequisites list Windows 11 Pro and Enterprise, not Home. Use a supported administrative workstation or server, or an edition that supports RSAT.
What is the PowerShell command to install ADUC?
Open PowerShell as administrator and run Add-WindowsCapability -Online -Name Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0.
What feature contains ADUC?
Install RSAT: Active Directory Domain Services and Lightweight Directory Services Tools. ADUC is one of the consoles in that package.
Best Value
How do I launch ADUC after installation?
Press Windows key + R, type dsa.msc, and press Enter. You can also search Start or open Start > Windows Tools.
Does installing ADUC install Active Directory on my PC?
No. RSAT installs remote-management tools; it does not install the AD DS server role, create a domain, or promote the PC to a domain controller.
Why can ADUC open but fail to connect to the domain?
Check that the PC is joined to the domain, has network or VPN connectivity, uses the correct DNS, can reach a domain controller, and uses an account with appropriate permissions.
Does ADUC require a reboot?
Not inherently. Microsoft’s example installation output reports RestartNeeded: False, although a particular Windows servicing operation may request a restart.
Why does RSAT fail on my Windows 11 ARM computer?
Microsoft says RSAT Feature on Demand packages are not supported on Windows 11 version 25H2 ARM64. For this platform, Microsoft directs users to the Control Panel Windows Features route.
The Bottom Line
On a supported Windows 11 Pro or Enterprise computer, install RSAT: Active Directory Domain Services and Lightweight Directory Services Tools from Optional Features or with the elevated PowerShell capability command. Launch ADUC with dsa.msc. To manage a domain, the computer must be joined to it and the account must have appropriate permissions.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
