Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to find groups and check the members inside AD, if possible using a tree view type of structure. I do not have RDC access to the DC, so I can't login and use Active Directory Users and Computers Snap in.

Is there another way to do this? From another server on the domain that is not a DC?

share|improve this question
up vote 5 down vote accepted

You need Windows Remote Administration Tools installed on a client workstation. It will allow you to manage the domain without having to login to the Domain Controllers.

You didn't specify what you're running, so I'll qualify my link saying it's the tools to be installed on Win7 to manage a 2008 server.

share|improve this answer

You could install the Server 2003 Admin Pack on your PC and use the AD Users and Computers Snap-In from your workstation. If you are running Vista/ Windows 7 you will need to enable the RSAT feature (Control Panel> Programs and Features> Turn Windows Features on or off) and select the AD DS and AD LDS Tools feature under "Role admin tools", under RSAT.

share|improve this answer

You can do this in a limited fashion in Windows 7 without installing anything extra. Open File Explorer, select Network, and you should see a button in the toolbar labeled "Search Active Directory".

Depending on your permissions, it will let you search users and groups by name, and view the membership of those. It won't show you a tree though; you have to know what you're looking for.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.