I would like to find groups and check the members inside AD, if possible using a tree view type of structure. I do not have RDC access to the DC, so I can't login and use Active Directory Users and Computers Snap in.

Is there another way to do this? From another server on the domain that is not a DC?

  • you can just execute rundll32 dsquery,OpenQueryWindow (from the Run window for example). This will show a search box and allow you to browse various AD Objects
    – Xavier C
    Jun 23, 2022 at 22:44

7 Answers 7


You need Windows Remote Administration Tools installed on a client workstation. It will allow you to manage the domain without having to login to the Domain Controllers.

You didn't specify what you're running, so I'll qualify my link saying it's the tools to be installed on Win7 to manage a 2008 server.

  • 1
    Starting with Windows 10 October 2018 Update, RSAT is included as a set of "Features on Demand" in Windows 10 itself.
    – OrangeDog
    Jan 20, 2021 at 11:09

You can do this in a limited fashion in Windows 10 (and 7-8) without installing anything extra. Open File Explorer, select Network, and you should see a button in the toolbar labeled "Search Active Directory".

Depending on your permissions, it will let you search users and groups by name, and view the membership of those. It won't show you a tree though; you have to know what you're looking for.

Update 2020-11-18: This option is now disabled for myself & some others; I don't know if it's my company's AD / GPO settings, or whether Microsoft has disabled this in recent builds of Windows 10.

"Search Active Directory"

  • This works on Windows 8.1 and Windows 10 as well Jul 29, 2016 at 19:21
  • RSAT won't install in Windows 10 for me anymore, so this really saved me!
    – jimtut
    Nov 8, 2019 at 19:00
  • My "Search Active Directory" button has recently been grayed out.
    – Jess
    Nov 17, 2020 at 21:14
  • 2
    Still there and working for me (20H2). However, the user properties only shows a subset and not e.g. group membership.
    – OrangeDog
    Jan 20, 2021 at 11:06
  • 1
    Unfortunately not there in Windows 11.
    – Jguy
    May 4, 2022 at 14:05

You could install the Server 2003 Admin Pack on your PC and use the AD Users and Computers Snap-In from your workstation. If you are running Vista/ Windows 7 you will need to enable the RSAT feature (Control Panel> Programs and Features> Turn Windows Features on or off) and select the AD DS and AD LDS Tools feature under "Role admin tools", under RSAT.


To get a list of AD users from a Windows PC belonging to AD:

  1. right click on a file
  2. Security tab: Edit
  3. Add: set these fields
    1. Object Types=Users
    2. From this location: <your AD domain name>
  4. Advanced
  5. Find Now

You can use Active Directory Explorer (ADExplorer) by Mark Russinovich:


You can use these commands:

net user /domain
net group /domain

To get the users in a specific group (doesn't seem to work recursively):

net group <GROUP> /domain

To get details for a user:

net user <USER> /domain

On my machine the Active Directory Module for Windows PowerShell was installed. So I ran this command to get info on a specific user:

Get-AdUser username

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.