Active Directory Users and Computers is a built-in Windows tool, not a separate read

Active Directory Users and Computers (ADUC) comes with Windows Server and Windows Pro editions — you do not install it as a separate program. On a domain-joined computer, you open it through the Administrative Tools menu or by typing a command. If you are on a workgroup machine or a home edition of Windows, the tool is not available because those systems do not connect to Active Directory domains.

The confusion usually comes from the fact that ADUC is a management console, not an process you read and run through an installer. It is part of the Remote Server Administration Tools (RSAT) on client machines, which you can add through Windows settings if you need to manage Active Directory from a non-server computer.

Key Takeaways

  • Active Directory Users and Computers is included with Windows Server and Windows Pro — you access it through Administrative Tools, not by installing software.
  • On Windows 10 or 11 Pro, you can add RSAT (Remote Server Administration Tools) through Settings > Apps > Optional Features to get ADUC on a non-server machine.
  • Once RSAT is installed, you open ADUC by searching for "Active Directory Users and Computers" in the Start menu or by running dsa.msc at the command prompt.
  • You must be on a domain-joined computer or have network access to a domain controller for ADUC to connect and display user and computer objects.

Opening Active Directory Users and Computers on Windows Server

If you are working on a Windows Server machine, ADUC is already present. Click the Start button, type "Active Directory Users and Computers" into the search box, and press Enter. The console will open when ready.

Alternatively, open Server Manager (which appears on the taskbar by default), click Tools in the top-right corner, and select Active Directory Users and Computers from the dropdown menu. Both routes take you to the same tool.

The first time you open ADUC, it connects to the domain controller for your local domain. If you are managing a different domain or a remote domain controller, you can right-click on "Active Directory Users and Computers" in the left panel and select "Connect to Domain Controller" to point it elsewhere.

Adding RSAT to Windows 10 or Windows 11 Pro

If you are using Windows 10 Pro, Windows 11 Pro, or a higher edition, you can add the Remote Server Administration Tools package, which includes ADUC. This lets you manage Active Directory from your workstation without being on a server.

Open Settings, go to Apps, then click Optional Features. Scroll down and click "Add an optional feature." Search for "RSAT" or "Remote Server Administration Tools" and select the package that includes Active Directory tools. Click Install and wait for the process to finish — this may take several minutes.

Once installed, search for "Active Directory Users and Computers" in the Start menu. It will appear in the results. Click it to open the console. If you do not see it, restart your computer and try again.

Using the Command Line to Open ADUC

You can also open Active Directory Users and Computers by running a command directly. Press Windows Key + R to open the Run dialog, type dsa.msc, and press Enter. The console will launch when ready.

This method works on any machine where ADUC is installed — whether that is a Windows Server or a Windows Pro workstation with RSAT added. The dsa.msc command is the Microsoft Management Console snap-in file that runs the tool.

If you want to connect to a specific domain controller, you can run dsa.msc /domain:yourdomain.com at the command prompt, replacing "yourdomain.com" with your actual domain name. This is useful if you manage multiple domains.

Requirements and Limitations

Active Directory Users and Computers requires that your computer be either on a domain or have network access to a domain controller. If you are on a workgroup (a standalone machine not joined to a domain), ADUC will not function — it has no Active Directory to connect to.

Windows Home editions do not support ADUC at all, even with RSAT installed. You need Windows Pro or higher. If you are running Home edition, you will need to use a different machine or upgrade your Windows version.

Your user account must also have the correct permissions on the domain to perform actions in ADUC. If you can open the tool but cannot create users, reset passwords, or move objects, your account lacks the necessary rights — contact your domain administrator to request the permissions you need.

Troubleshooting ADUC Connection Issues

If ADUC opens but shows no domains or users, your computer may not be connected to the domain controller. Check that your network connection is active and that you can reach your domain. If you are on a remote network or VPN, make sure the connection is established before opening ADUC.

If you installed RSAT but ADUC does not appear in the Start menu, restart your computer. Windows sometimes requires a reboot for optional features to fully register. After restarting, search again for "Active Directory Users and Computers."

If you see an error message saying "The specified domain either does not exist or could not be contacted," verify that the domain name is spelled correctly and that your computer has network access to a domain controller. You can test connectivity by opening Command Prompt and running ping yourdomain.com (replace with your actual domain).

Frequently Asked Questions

Can I use Active Directory Users and Computers on Windows Home edition?

No. ADUC requires Windows Pro or higher. Home editions do not support Active Directory management tools, even with RSAT installed. You will need to upgrade to Pro or use a different machine that meets the requirements.

What is the difference between opening ADUC on a server versus a workstation with RSAT?

There is no functional difference — ADUC works the same way on both. The only practical difference is that servers have ADUC built in, while workstations require you to add RSAT first. Both connect to the same domain and display the same information.

Do I need administrator rights to open Active Directory Users and Computers?

You need administrator rights on your local machine to open ADUC. However, your ability to make changes in Active Directory depends on your permissions within the domain itself, which are separate from local admin rights. You may be able to open ADUC but not create users if your domain account lacks those permissions.

Can I manage multiple domains from one ADUC window?

No. Each ADUC window connects to one domain at a time. To manage a different domain, you can open a second ADUC window by running dsa.msc /domain:anotherdomain.com or by using the "Connect to Domain Controller" option within the existing window to switch domains.

What should I do if ADUC shows an error about not being able to contact the domain controller?

Check your network connection first. If you are on a VPN, make sure it is connected. Verify the domain name is correct. If the problem persists, contact your network administrator — the domain controller may be offline or your computer may not have the correct DNS settings to locate it.