I want to install the administration tools on a Windows Server 2008 (R1) machine. On Windows 2003 you installed adminpak.msi, but I can't find such a file for 2008.

Is this a "feature" in Server Manager? If so what is it named?

---UPDATE--- So I drilled into the server Features list and I have "Remote Server Administration Tools" but it only includes File Services, Print Services and Web Server.

This is a member server in a domain but not a domain controller. It is Windows 2008 (original) not R2. Still, why can't it run AD users and computers from this machine?

  • Wouldn't it be easier to open MMC and add the ADUC snap-in?
    – DanBig
    Commented Feb 2, 2010 at 19:18
  • I found this question and a few of the answers very helpful. Why is everyone so stingy with the votes?
    – Jay Riggs
    Commented Apr 1, 2010 at 18:22
  • I know this is a very old question but I've just seen it for the first time and after reading the various comments I can only wonder why the OP wants to install these tools if he's not a domain admin. Having the tools but not the permission to use them make this a bit of a pointless exercise. Commented Feb 17, 2012 at 9:46

6 Answers 6


From Server Manager (available under Administrative Tools), go to "Features", then "Add Features".

Windows Server 2008 Standard Instructions:


  • Remote Server Administration Tools
    • Role Administration Tools
      • Active Directory Domain Services Tools

Then check Active Directory Domain Controller Tools.

Windows Server 2008 R2 Instructions:


  • Remote Server Administration Tools
    • Role Administration Tools
      • AD DS and AD LDS Tools
        • AD DS Tools

Then check AD DS Snap-Ins and Command-Line Tools.

Feature Includes:

  • Active Directory Users and Computers
  • Active Directory Domains and Trusts
  • Active Directory Sites and Services
  • Not available on my Windows 2008 member server. Maybe restricted by GPO? Or is this a Microsoft thing that those tools are only available on domain controllers or through the addon for Vista/Win7? Commented Feb 5, 2010 at 20:59
  • i have it on a workgroup 2008 server.. Can you check again ? Commented Feb 5, 2010 at 22:46
  • I am pretty sure that my domain admin's have restricted this by group policy Commented Feb 15, 2010 at 18:57
  • 1
    I'f they've restricted the gui install the quest AD powershell tools and run Get-QADObject -Type OrganizationalUnit
    – Jim B
    Commented Mar 19, 2010 at 16:37
  • 11
    For Server 2008 R2 it is similar but not identical, under Role dministration Tools you need to drill into AD DS and AD LDS Tools -> AD DS Tools -> AD DS Snap-Ins and Command-Line Tools.
    – Alex Peck
    Commented Sep 7, 2010 at 15:37

The first answer from Mathieu Chateau was basically correct, you do not have to dcpromo to get this. however, the role option is "AD DS and AD LDS Tools" not "Active Directory Domain Services Tools"



I think you're right and that it's a feature under Server Manager. If you dcpromo it, I think they show up automatically based on the roles you give it. But if it's just a member server, you have to install the feature "Remoter Server Administrator Tools". When you expand the tree, you can select AD Domain Services Tools, DNS Server Tools, DHCP, etc. Try looking there, and then make sure that you customize the Start Menu setting so that it shows up.

Edit: Bah, Joe said it while I was typing this up....

  • 1
    I would be blind folded and marched in front of the firing squad if I dcpromoed this server. I am a developer who needs to see how the OUs are laid out for this domain. I found RSAT under Features, but only have File Services, Print Services and Web Server. Maybe it can't be done Commented Feb 2, 2010 at 19:14
  • Having someone "dcpromo" a server to gain access to a tool set is not good advice.
    – DanBig
    Commented Feb 2, 2010 at 19:24
  • I wasn't saying he should dcpromo it, just that "if" he did, he would have access to it. Sorry for the confusion. Commented Feb 2, 2010 at 19:50
  • @Mark, so when you go into Server Manager and add Features, you don't have Role Administration Tools->Active Directory Domain Services Tools->Active Directory Domain Controller Tools? In the KB that Joe linked, it says "Some tools might also work on roles or features that are running on Windows Server 2003". Are you trying to view/administer a 2003 Domain? Maybe that's where the hang up is (although I don't see why it would be an issue). Commented Feb 2, 2010 at 20:09
  • @Holycryptic, Right I don't have the Active Directory Domain Services Tools available Commented Feb 5, 2010 at 20:56

This should do the trick:


  • See comment for @jscott. I need to admin tools installed on Windows Server 2008 not Vista. Commented Feb 2, 2010 at 18:44
  • Gotcha. Sorry. just add the RSAT Feature and then select the RSAT components you'd like on your W2K8 server. This process is the same for W2K8 and W2K8R2. - technet.microsoft.com/en-us/library/cc730825.aspx
    – joeqwerty
    Commented Feb 2, 2010 at 19:00

I believe the MS answer is "Don't manage a domain from a server".

The reason the RSAT tools are only available for download for the client OS is because that's how you're supposed to manage the whole domain. If you're logging in to a server to do basic domain administrative tasks, you're doing it wrong. The only reason they exist on the DC is because they must be there for initial domain configuration and for troubleshooting and recovery. The general idea is that the only real reason to log on to a server is to install or configure software or updates. Otherwise, if it can be done remotely, do it that way. Honestly, MS should install a "log on reason" just like they have the "shutdown/reboot reason".

To make a long story short, set up Vista or 7 and administer from there.


Launch the server manager and click on the Features See the screenshot

I thought it will be easier to see the picture

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .