How to Enable Active Directory Users and Computers | Setup

Enable Active Directory Users and Computers (ADUC) by installing the RSAT: AD DS and LDS Tools optional feature in Windows Settings.

Active Directory Users and Computers is the Microsoft Management Console snap-in IT admins use to manage user accounts, groups, organizational units, and other directory objects in Active Directory Domain Services. The procedure for how to enable Active Directory Users and Computers depends on your Windows version. On modern Windows 10 builds (1809 and later) and Windows 11, you add it as an optional feature. On older releases, you download the Remote Server Administration Tools package separately. Windows Server uses its own Add Roles and Features workflow. This guide covers all three paths.

How to Install ADUC on Windows 10 and 11 (Version 1809 and Later)

On current Windows client builds, the ADUC console is installed through the Optional Features section of Windows Settings. The feature name you need is RSAT: Active Directory Domain Services and Lightweight Directory Services Tools.

1. Open Settings > Apps > Optional features.
2. Click Add a feature near the top of the page.
3. In the search box, type RSAT: Active Directory.
4. Select the result labeled RSAT: Active Directory Domain Services and Lightweight Directory Services Tools.
5. Click Install and wait for the process to finish. Windows may prompt you to restart.

After the restart, ADUC appears in the Start menu under Windows Administrative Tools (Windows 10) or Windows Tools (Windows 11). The installation requires an internet connection because the feature payload downloads on the fly.

For a quicker installation path on these builds, you can use PowerShell with the capability name Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0:

Get-WindowsCapability -Name RSAT.ActiveDirectory* -online | Add-WindowsCapability -Online

Wait for the command to complete, then restart.

Installing ADUC on Windows 10 Version 1803 and Below

Older Windows 10 releases use the legacy RSAT download method. The optional features path is not available on these builds.

1. Download the RSAT package from the Microsoft Download Center that matches your Windows version.
2. Run the installer and follow the prompts.
3. Open Control Panel > Programs and Features > Turn Windows features on or off.
4. Navigate to Remote Server Administration Tools > Role Administration Tools > AD DS and AD LDS Tools.
5. Check the AD DS Tools box and click OK.
6. Restart when prompted.

After the restart, ADUC is available from the Start menu under Windows Administrative Tools.

Adding ADUC on Windows Server

Windows Server includes RSAT as an optional component in Server Manager. The process is slightly different from the client OS path.

1. Open Server Manager and click Manage in the top menu.
2. Select Add Roles and Features and proceed through the wizard.
3. On the Features page, expand Remote Server Administration Tools > Role Administration Tools > AD DS and AD LDS Tools.
4. Check AD DS Tools and complete the installation.
5. Open ADUC from Server Manager > Tools > Active Directory Users and Computers, or from Start > Administrative Tools.

Installation Methods at a Glance

Launching Active Directory Users and Computers

Once the tools are installed, you have several ways to open ADUC. The fastest method is to press Win+R, type dsa.msc, and hit Enter. You can also find it in the Start menu under Windows Administrative Tools (Windows 10) or Windows Tools (Windows 11). On Windows Server, it appears under Server Manager > Tools. Microsoft’s RSAT documentation confirms these installation paths for each supported Windows version.

If dsa.msc does not launch, the snap-in is not installed. Run through the installation steps for your OS version and restart before trying again.

How to Enable a User Account in ADUC

The core task ADUC handles is managing domain user accounts. Microsoft’s documented procedure for enabling a disabled account takes a few clicks.

1. Open Active Directory Users and Computers.
2. Expand the domain tree and select the container or OU that holds the user account.
3. Locate the user account in the right pane.
4. Open the Action menu and select Enable Account.
5. In the confirmation dialog, click OK. The account is now active.

You can also right-click the user object and choose Enable Account from the context menu for the same result. A disabled account shows a downward-pointing arrow icon in the list; after enabling, the icon returns to normal.

Common Mistakes When Enabling ADUC

What You Need Before Installing ADUC

ADUC is a management console for Active Directory Domain Services, so it requires a few prerequisites. Your Windows machine must be running a Professional or Enterprise edition — Home editions cannot install RSAT. The machine should be joined to a domain or at least have network access to a domain controller to manage objects. You also need local administrator rights to install the feature.

Once everything is in place, the three paths are straightforward. For modern Windows clients, open Settings > Optional features and search for the RSAT AD DS component. For older builds, download RSAT manually and enable ADUC through Control Panel. On Windows Server, use the Add Roles and Features wizard. Each method ends with a restart and a working ADUC console ready to manage directory objects.