The Active Directory groups are an effective solution for those who work with data systems, people management, etc. However, installing it on a computer is confusing for many newbies.
Don’t worry; the Trustguide Team will tell you how to solve this problem. Check it out.
What are active directory groups?
Developed by Microsoft, Active Directory or AD is a directory service for networks using Windows domains. It is present in most Windows Server operating systems as a collection of services and processes.
https://ecostruxure-building-help.se.com/graphics/en-US/graphics23401.png
Its function is to help users manage “objects” which may include information about computers, people, organizations, and their characteristics. Based on that, administrators can centralize repositories to share with other users or other organizations.
You can also manage permissions, user configurations, and administrative privileges using Active Directory in Group Policy.
We have two types of groups in Active Directory services:
Distribution groups: Can be used with email clients, but it is not listed in the access control list.
Security groups: Ability to transfer permissions and rights to groups of computers and users, or send emails to group members.
What Services Does Active Directory Include?
Domain Services (AD DS)
As the main service of AD, it is responsible for centralized data storage and management of user-domain communication, such as login authentication or search functionality.
Lightweight Directory Services (AD LDS)
The “lightweight” name only provides a small portion of the full range of AD Domain Services features. Of course, the small working range also helps it to have a more flexible processing speed.
Certificate Services (AD CS)
Has the role of generating secure certificates, then distributing and managing them.
Federation Services (AD FS)
Featured with the single-sign-on feature, helping users save time.
Rights Management (AD RM)
https://theitbros.com/wp-content/uploads/2021/02/word-image-65.png
Take action to prevent unauthorized use and distribution of copyrighted information.
How To Enable Active Directory?
The Settings App On Windows 11
To enable this service, using the optional feature of the Settings app is the way most people choose. You can do the following:
Step 1: Go to the Start Menu and select the ‘Settings’ item found in the ‘Pinned apps’ section. If not, you can also search for Settings on the “Type here to search” bar at the top to find it.
Step 2: Now, the Settings window will appear; select ‘Apps’ in the lower left corner to continue. Look to the right part of the screen, drag the mouse down and select the ‘Optional features‘ box.
Step 3: In the new tab, you will see the option ‘Add an optional feature’ in the first line. Select the ‘View features’ item on the right edge of that option to bring up the next window.
Step 4: Type “Active Directory” in the search bar, and the window will show two items for you to choose from. Check the box next to the option RSAT: Active Directory Domain Services and Lightweight Directory Services, and click the ‘Next’ box below.
Step 5: Select ‘Install’ to start the installation. Here it would help if you had some patience as the installation process can take up to several minutes.
Step 6: Once done, go back to the Start Menu and find and open the Windows Tools section again.
Step 7: Double-click on ‘Active Directory Users and Computers’ to start managing devices connected to the server.
Enable By PowerShell
If you often work with Powershell, this way will be more convenient for you than using Settings. The steps are as follows:
Step 1: Still go to the Start Menu as above but search ‘Terminal’ to search for the application. Right click on ‘Terminal’ and select ‘Run as administrator’
Step 2: At the User Account Control window, log in if you have not logged in with an administrator account. If you did, select ‘Yes’.
Step 3: Enter the command “Add-WindowsCapability -Online -Name “Rsat.ActiveDirectory.DS-LDS.Tools” in the new window of Terminal and then press Enter.
Note: Your computer needs the internet when performing this operation.
Step 4: Watch and wait; it may take some time. Once done, you can close the window.
Step 5: Go back to Start Menu and open Windows Tools. Find and open the ‘Active Directory Users and Computers’ section. So you’re ready to manage your data.
Using Command Prompt
https://cloudblogs.microsoft.com/industry-blog/wp-content/uploads/industry/sites/22/2019/05/powershell7-1024×554.png
In addition to the two methods above, there is still a suitable way for those who prefer to use Command Prompt. The steps include:
Step 1: Go to Start Menu and search “cmd” in the search bar. Then, select the ‘Command Prompt’ and ‘Run as administrator’ items, respectively.
Step 2: At the new UAC screen, sign in if you are not logged in with an admin account, or select ‘Yes’ if you do.
Step 3: In the new Command Prompt tab, enter the below command and press Enter. Please wait a few minutes.
“DISM.exe /Online /Get-CapabilityInfo /CapabilityName:Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0”
Step 4: Go back to Start Menu and open Windows Tools. Continue double-clicking to run the ‘Active Directory Users and Computers‘ entry. It is done.
Conclusion
Above is information about active directory groups – a great assistant in managing data and internal accounts. What are you waiting for? Quickly install and enjoy its utilities.
If you have any questions, don’t hesitate to leave a comment below. Thanks for reading.
Leave a Reply