You can’t install the Active Directory Domain Services (AD DS) server role on Windows 11. Domain controllers must run Windows Server. What you can install on Windows 11 is Active Directory Users and Computers and the other AD management tools, which let you manage a domain from your PC. Go to Settings > System > Optional features, click View features, search for RSAT, check RSAT: Active Directory Domain Services and Lightweight Directory Services Tools, and click Next > Add.
These tools (called RSAT, Remote Server Administration Tools) work on Windows 11 Pro, Enterprise, and Education. Here’s how to install them, open them, and fix common problems.
Requirements
- Windows 11 Pro, Enterprise, or Education. RSAT isn’t available on Windows 11 Home.
- An administrator account on the PC.
- An internet connection, or access to your organization’s update server.
- A domain to manage, with your PC joined to it or credentials for it.
How to install Active Directory tools on Windows 11
- Open Settings > System > Optional features. (On earlier Windows 11 versions, it’s under Apps > Optional features.)
- Next to Add an optional feature, click View features.
- Type RSAT in the search box.
- Check RSAT: Active Directory Domain Services and Lightweight Directory Services Tools. Add RSAT: Group Policy Management Tools and RSAT: DNS Server Tools if you need them.
- Click Next, then Add. Wait for the installation to finish.
Install with PowerShell
Open PowerShell as administrator and run:
Add-WindowsCapability -Online -Name Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0
To install all RSAT tools at once, run:
Get-WindowsCapability -Name RSAT* -Online | Add-WindowsCapability -Online
How to open Active Directory Users and Computers
- Click Start, type Active Directory Users and Computers, and open it.
- Or press Windows key + R, type dsa.msc, and press Enter.
- Other tools appear under Start > All apps > Windows Tools, like Active Directory Sites and Services and ADSI Edit.
Want to set up a domain controller?
To create a domain, install Windows Server on a server or virtual machine, then add the Active Directory Domain Services role through Server Manager > Add Roles and Features, and promote the server to a domain controller. For testing, Microsoft offers evaluation versions of Windows Server that you can run in Hyper-V on Windows 11 Pro.
Troubleshooting
- RSAT doesn’t appear in the list: You may be on Windows 11 Home, or your organization blocks optional features. Check Settings > System > About.
- Install fails with error 0x800f0954: Your PC may be set to use a company update server. Ask your IT team, or temporarily allow Windows Update in Group Policy.
- “The specified domain either does not exist or could not be contacted”: Your PC isn’t joined to the domain or can’t reach it. Connect to the network or VPN, or right-click the root and choose Change Domain.
Frequently asked questions
Can Windows 11 be a domain controller?
No. Only Windows Server can run AD DS as a domain controller.
Is RSAT free?
Yes. It’s a free optional feature for supported Windows 11 editions.
Can I install RSAT on Windows 11 Home?
No. Upgrade to Windows 11 Pro to get it.
How do I uninstall RSAT tools?
Go to Settings > System > Optional features, find the tool under Installed features, and click Remove.
Kermit Matthews is a freelance writer based in Philadelphia, Pennsylvania with more than a decade of experience writing technology guides. He has a Bachelor’s and Master’s degree in Computer Science and has spent much of his professional career in IT management.
He specializes in writing content about iPhones, Android devices, Microsoft Office, and many other popular applications and devices.