ADUC is installed by default on Windows Server (via the Active Directory Domain Services role) and can be installed on Windows workstations via .
While ADUC remains the GUI standard, the modern IT landscape has shifted, impacting how ADUC is utilized. aduc active directory
ADUC includes several built-in containers that cannot be renamed or deleted: ADUC is installed by default on Windows Server
ADUC is not a standalone executable application but a snap-in (snap-in: dsa.msc ) hosted within the Microsoft Management Console (MMC). This architecture allows administrators to combine ADUC with other snap-ins (such as Group Policy Management or DNS) into a single, customized administrative console. This architecture allows administrators to combine ADUC with
| Object Type | Management Capabilities | |-------------|--------------------------| | | Create, delete, reset passwords, enable/disable, unlock accounts, modify profile paths, logon hours, and account expiry. | | Groups | Create security/distribution groups, manage membership (nested groups), change group scope (Domain Local, Global, Universal). | | Computers | Join/disable/reset computer accounts, manage delegation, read operating system information. | | OUs | Create hierarchical containers, delegate control, link Group Policy Objects (GPOs). | | Contacts | Add external email contacts (non-security principals). | | Shared Folders & Printers | Publish network resources in the directory. |