Install and Use the Active Directory PowerShell Module

The Active Directory PowerShell module lets administrators manage users, computers, groups, and organizational units without relying solely on graphical consoles. RSAT can be installed on a workstation or member server, but operations still require appropriate permissions.

Install and validate the module

On Windows 10 and 11, install RSAT through Optional Features or PowerShell:

Add-WindowsCapability -Online -Name Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0

On Windows Server, use Get-WindowsFeature to check for RSAT-AD-PowerShell, then install it with Install-WindowsFeature if needed. Load and verify the module with Import-Module ActiveDirectory and Get-Module -Name ActiveDirectory -ListAvailable.

Connectivity and troubleshooting

The module communicates through Active Directory Web Services. If commands cannot reach the directory, check the service and test TCP 9389 on the domain controller with Test-NetConnection. Use -Server to target a domain controller or domain, and -Credential for an alternate account.

Useful cmdlets

• Read data with Get-ADUser, Get-ADComputer, and Get-ADGroupMember.
• Create objects with New-ADUser, New-ADGroup, and New-ADOrganizationalUnit.
• Make controlled changes with Set-ADUser, Add-ADGroupMember, and Move-ADObject.
• Manage account state with Enable-ADAccount, Disable-ADAccount, Unlock-ADAccount, and Search-ADAccount.

Use Get-Help for guidance and Get-Command -Module ActiveDirectory to list commands. Remote import is possible through PowerShell remoting when the module exists on another computer and WinRM is configured.

Practical takeaway

Validate RSAT, module loading, and domain-controller connectivity first. Test read-only queries, then apply changes narrowly, confirming scope, permissions, and target server before execution.