sodcalculator

10 Tech How-To

Add Active Directory Users and Computers to Windows 11

Guide 10-13276 · Updated · Step by step

This guide shows you how to add the Active Directory Users and Computers snap-in to Windows 11, so you can manage users, groups, and computers in an on-premises domain from your own PC. You’ll need a Windows 11 Pro, Enterprise, or Education edition (Home doesn’t support it), and you must be signed in as a user with the right to read or modify Active Directory. The process takes about five minutes and uses built-in Windows features—no third-party tools required.

What You’ll Need

  • Windows 11 Pro, Enterprise, or Education (check in Settings > System > About).
  • Administrator rights on the PC (to install the RSAT feature).
  • Access to a domain-joined network or at least network connectivity to a domain controller.
  • An account with permission to view or edit Active Directory objects (e.g., a domain user or admin account).

Step-by-Step

  1. Open Windows Settings. Press Win + I or click the Start button and select the gear icon.
  2. Go to Apps. In the left sidebar, click Apps, then select Optional features.
  3. Click “View features�. Under “Add an optional feature,� click the View features button. This opens a list of available optional features.
  4. Search for RSAT. In the search box, type RSAT. You’ll see several entries like “RSAT: Active Directory Domain Services and Lightweight Directory Services Tools.�
  5. Select the correct package. Check the box next to RSAT: Active Directory Domain Services and Lightweight Directory Services Tools. This package includes the Active Directory Users and Computers snap-in (dsa.msc).
  6. Install it. Click the Next button, then click Install. Windows will download and install the feature. This may take a few minutes.
  7. Wait for completion. You’ll see a progress bar. Once it says “Installed,� you can close Settings.
  8. Open the tool. Press Win + R, type dsa.msc, and press Enter. Or search for “Active Directory Users and Computers� in the Start menu.
  9. Connect to your domain. If your PC is domain-joined, the tool will automatically connect to the domain. If not, right-click the root node in the left pane and select Change Domain to type the domain name or domain controller.
  10. Start managing. Expand the domain node to see folders like Users, Computers, and Organizational Units. Right-click any object to manage it.

Common Mistakes

  • Installing on Windows 11 Home: The RSAT tools are not available on Home edition. You’ll need to upgrade to Pro or use a different method (like PowerShell with the ActiveDirectory module, which also isn’t supported on Home).
  • Installing the wrong RSAT package: There are several RSAT options. Make sure you pick the one that includes “Active Directory Domain Services and Lightweight Directory Services Tools,� not just “Active Directory Lightweight Directory Services Tools� (which is a different service).
  • Not having admin rights: The installation will fail or be grayed out if your account is not an administrator. Use an admin account or right-click Settings and choose “Run as administrator.�
  • Forgetting to reboot: Some older builds required a restart after installation. If the tool doesn’t appear, restart your PC and try again.

Tips

  • Pin it to the taskbar: Once opened, right-click the icon in the taskbar and select “Pin to taskbar� for quick access.
  • Use the “Run as different user� option: If you need to manage AD with a different account, hold Shift, right-click the tool, and select “Run as different user.�
  • Create a desktop shortcut: Right-click the desktop, choose New > Shortcut, and type dsa.msc.
  • Install via PowerShell (optional): If you prefer, you can run Add-WindowsCapability -Online -Name Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0 as an admin in PowerShell. This does the same thing.
  • Keep it updated: RSAT tools are updated via Windows Update. Make sure your system is up to date to get the latest fixes.

Troubleshooting

I can’t find the RSAT option in Optional Features.
Make sure you’re on Windows 11 Pro or better. If you’re on Home, you’ll need to upgrade. Also, check that you have internet connection—the list loads from Windows Update.

The installation fails with an error.
Try running Windows Update first to ensure your system is current. Then restart and try again. If it still fails, use the PowerShell command mentioned in Tips—it often gives a clearer error.

The tool opens but shows “Cannot connect to any domain.�
This usually means your PC can’t reach a domain controller. Check your network connection, DNS settings, and that you’re on the correct network (VPN if remote). You can also manually specify a domain controller by right-clicking the root and choosing “Change Domain Controller.�

I get an “Access Denied� when trying to view objects.
Your account doesn’t have permission. Contact your domain administrator to grant you read or write access, or use an account with appropriate rights.

The snap-in is installed but not in the Start menu.
Search for “Active Directory Users and Computers� or run dsa.msc from the Run dialog. If it still doesn’t appear, restart your PC.

Frequently Asked Questions

Can I use this on Windows 11 Home?
No, RSAT tools are not available on Home edition. You’d need to upgrade to Pro, Enterprise, or Education.

Do I need to be on a domain-joined PC?
No, but you need network access to a domain controller. You can connect to a domain from a workgroup PC by specifying the domain name when prompted.

Is there a difference between RSAT and the Active Directory Administrative Center?
Yes. RSAT includes several tools. Active Directory Users and Computers (dsa.msc) is the classic snap-in. The Active Directory Administrative Center (dsac.exe) is a newer, more modern interface. You can install both from the same RSAT package.

Can I manage Azure AD with this tool?
No, this tool is for on-premises Active Directory. For Azure AD (now Microsoft Entra ID), you use the Microsoft Entra admin center or the Microsoft Graph PowerShell module.

Will this work on Windows Server?
Yes, but on Windows Server, the tools are usually installed via Server Manager or the AD DS role. The RSAT client is for client OS like Windows 11.

Is it safe to install RSAT?
Yes, it’s a Microsoft-supported feature. It doesn’t change system settings or affect performance. It just adds management tools.

Related

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →