How to Access Active Directory on Windows 11 (Install RSAT)

To access Active Directory on Windows 11, install the Remote Server Administration Tools (RSAT). Go to Settings > System > Optional features, click View features, search for RSAT, check RSAT: Active Directory Domain Services and Lightweight Directory Services Tools, and click Next > Add. When it finishes, open Active Directory Users and Computers from Windows Tools, or press Windows + R and type dsa.msc.

You need Windows 11 Pro, Enterprise, or Education, a connection to your organization’s network, and an account with permission to view or manage the directory. RSAT isn’t available for Windows 11 Home.

Before you start

  • Check your edition: Go to Settings > System > About and look at Edition.
  • Be on the network: Connect to your office network or VPN so your PC can reach a domain controller.
  • Get permission: On work PCs, installing RSAT may require administrator rights, and your IT policy may already control it.

Step 1: Install the Active Directory tools

  1. Press Windows + I and go to System > Optional features. (In some versions, it’s under Apps > Optional features.)
  2. Next to Add an optional feature, click View features.
  3. Type RSAT in the search box.
  4. Check RSAT: Active Directory Domain Services and Lightweight Directory Services Tools. Add RSAT: Group Policy Management Tools too if you need it.
  5. Click Next, then Add (or Install). Wait for the installation to finish.
Windows 11 Add an optional feature window with RSAT Active Directory Domain Services tools checked and Next highlighted
(1) Check the RSAT Active Directory tools, then (2) click Next to install them. (Illustration)

Install with PowerShell instead

Open Terminal (Admin) and run:

Add-WindowsCapability -Online -Name Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0

To see all RSAT tools and whether they’re installed, run Get-WindowsCapability -Name RSAT* -Online.

Step 2: Open Active Directory Users and Computers

  • Click Start > All apps > Windows Tools, then double-click Active Directory Users and Computers.
  • Or press Windows + R, type dsa.msc, and press Enter.

If your PC isn’t joined to the domain, right-click Active Directory Users and Computers in the left pane, choose Change Domain, and enter the domain name. You may need to run the tool as a domain user with runas /netonly /user:DOMAIN\username mmc dsa.msc.

Other Active Directory tools included

Tool Run command Used for
Active Directory Users and Computers dsa.msc Users, groups, computers, and OUs
Active Directory Administrative Center dsac.exe A newer interface, including the Recycle Bin
Active Directory Sites and Services dssite.msc Sites, subnets, and replication
Active Directory Domains and Trusts domain.msc Domain trusts and functional levels
ADSI Edit adsiedit.msc Low-level editing (use with care)

The ActiveDirectory PowerShell module is installed too, so commands like Get-ADUser work.

Troubleshooting

  • RSAT doesn’t appear in Optional features: Make sure you’re on Pro, Enterprise, or Education and that Windows is up to date. On managed PCs, your organization may block downloads from Windows Update. Ask IT for the installation source.
  • Installation fails with error 0x800f0954: This usually means a WSUS server is blocking the download. Your IT department can allow optional features from Windows Update.
  • “The specified domain either does not exist or could not be contacted”: Check your network or VPN connection, and make sure your DNS points to your organization’s DNS servers.
  • Access denied when editing: Your account can view but not change objects. Ask your administrator for the right permissions.

Frequently asked questions

Is RSAT free?

Yes. It’s included with Windows 11 Pro, Enterprise, and Education as an optional feature.

Can I use Active Directory on Windows 11 Home?

No. Home can’t join a domain or install RSAT. Upgrade to Pro, or use a remote session to a server.

How do I remove the tools later?

Go to Settings > System > Optional features, find the RSAT tool under installed features, and click Remove.