I have researched on how to do this for awhile, and the best way that I have found is the way I am about to describe. This will allow you to install only the Active Directory Users and Computers tool from the
AdminPak.msi folder from Microsoft. This is crucial to allow only certain tools to be available to certain users with restricted or refined permissions on your IT dept.
What you need:
- Windows Server 2003 adminpak.msi file from the i386 folder from the Windows Server 2003 CD or extracted from the latest Service Pak (if applicable)
- Administrative rights on the machine you're installing the snap-in
- Proper security permissions on the DC
Here's the
article explaining which commands are available to you.
- Copy the adminpak.msi file to %windir%\system32
- Go to the command prompt
- Type in this command:
- msiexec /i adminpak.msi ADDLOCAL=FeADTools /qb (example)
- Navigate to the Administrative Tools section and you will have the AD Users and Computers snap-in.