Installing RSAT¶

Before you can manage Active Directory from a Windows client machine, you must install the Remote Server Administration Tools (RSAT). RSAT provides the administrative modules, cmdlets, and graphical tools required to interact with domain controllers, manage users and groups, administer Group Policy, and perform directory‑related tasks directly from your workstation. Without RSAT, a Windows client does not include the Active Directory PowerShell module, and therefore cannot run commands such as Get-ADUser, New-ADGroup, or Get-ADComputer.

This section explains what RSAT is, how it is delivered on modern versions of Windows, and how to install it in a controlled and predictable way.

1. Understanding What RSAT Provides¶

RSAT is a collection of management tools originally designed for administrators who need to manage servers remotely. Although the name suggests remote administration, RSAT’s most important role for PowerShell users is that it installs the Active Directory module, which contains cmdlets such as:

• Get-ADUser
• Set-ADUser
• New-ADGroup
• Get-ADComputer
• Get-ADDomain
• Get-ADOrganizationalUnit

RSAT also includes graphical tools such as:

• Active Directory Users and Computers (ADUC)
• Active Directory Administrative Center (ADAC)
• DNS Manager
• Group Policy Management Console (GPMC)

These tools are optional, but the PowerShell module is essential for scripting and automation.

2. RSAT Availability on Modern Windows Versions¶

On older versions of Windows (Windows 7, Windows 8.1), RSAT was delivered as a downloadable installer.

On Windows 10 (1809 and later) and Windows 11, RSAT is included as a set of optional features that can be installed directly from the operating system.

This means:

• You do not download RSAT separately.
• You enable it through Windows Features or PowerShell.
• The installation is modular—you can install only the components you need.

This approach ensures that RSAT is always compatible with the OS version.

3. Installing RSAT Using PowerShell¶

PowerShell provides a clear and repeatable way to install RSAT components. This is the recommended method for administrators because it allows automation and ensures consistency across machines.

Checking which RSAT components are available¶

Get-WindowsCapability -Online | Where-Object { $_.Name -like "Rsat*" }

This command lists all RSAT features that can be installed on the system, including:

• Rsat.ActiveDirectory.DS-LDS.Tools
• Rsat.GroupPolicy.Management.Tools
• Rsat.Dns.Tools
• Rsat.ServerManager.Tools

Each component is listed with a state of Installed or NotPresent.

Installing the Active Directory module¶

Add-WindowsCapability -Online -Name Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0

This installs the AD PowerShell module and the associated graphical tools.

Installing all RSAT components¶

Get-WindowsCapability -Online |
    Where-Object { $_.Name -like "Rsat*" -and $_.State -eq "NotPresent" } |
    Add-WindowsCapability -Online

This installs every RSAT feature available on the system.

4. Verifying the Installation¶

After installation, you can confirm that the Active Directory module is available.

Checking module availability¶

Get-Module -ListAvailable ActiveDirectory

If the module appears in the list, RSAT installed successfully.

Importing the module¶

Import-Module ActiveDirectory

Once imported, you can begin using AD cmdlets:

Get-ADDomain
Get-ADUser -Filter *

If these commands run without error, the environment is ready for Active Directory management.

5. Installing RSAT Through the GUI¶

Although PowerShell is the preferred method, RSAT can also be installed through the graphical interface.

Windows 10 / Windows 11¶

1. Open Settings
2. Select Apps
3. Select Optional features
4. Click Add a feature
5. Search for “RSAT”
6. Install the desired components

This method is useful for one‑off installations but is less suitable for automation.

6. Network and Policy Considerations¶

In enterprise environments, RSAT installation may be affected by:

WSUS or SCCM¶

If the organization uses WSUS or SCCM to manage updates, RSAT installation may fail unless the required features are approved or available on the update server.

Group Policy restrictions¶

Some organizations restrict the installation of optional features.

In such cases, administrators must adjust policy settings or temporarily allow RSAT installation.

Internet connectivity¶

On systems configured to retrieve optional features from Microsoft Update, an internet connection is required unless the organization provides a local feature store.

Understanding these constraints ensures that RSAT installation proceeds smoothly.

7. Summary¶

RSAT is an essential prerequisite for managing Active Directory from a Windows client. It provides:

• The Active Directory PowerShell module
• Graphical administrative tools
• DNS, Group Policy, and other management consoles

On modern Windows versions, RSAT is installed as an optional feature rather than a separate download. PowerShell offers a reliable and repeatable method for installing and verifying RSAT components, making it the preferred approach for administrators.

With RSAT installed, you can begin using the full suite of Active Directory cmdlets and tools, enabling powerful automation and centralized management of directory services.