How to Manage Active Directory Group Membership from Windows

In order to manage active directory groups:

1. You must have been granted permissions to manage one or more Active Directory groups before these instructions are relevant. 
2. You must be running Windows Professional or Enterprise 7 or 10.
3. The computer you install this software on must be joined to the KIEWIT Active Directory domain.

Software Installation

Installing the RSAT Tools for Windows 10 version 1809 and later versions is slightly different from earlier versions. RSAT is now part of the Operating System an can be installed via Optional Features.

To enable the tools do the following steps: 

Windows 10

• Click Start
• Click Settings
• Click Apps & Features
• Click Optional features 
• Click on Add a Feature
• Search for RSAT
• Select and install RSAT: Active Directory Domain Services and Lightweight Directory Services Tools

Windows 11

• Click Start
• Click Settings
• Click Apps 
• Click Optional features 
• Click on the panel View features

• Enter RSAT in the search bar, Select the check box next to RSAT: Active Directory Domain Services and Lightweight Directory Services Tools and click next then install.

• You will see it begin installing as seen in the screenshot below

How to Pin to Start or Taskbar

The application may not appear in the start menu. If it does not do the following.

Windows 11

• Navigate to Control panel
• Select Windows Tools
• Right-click on Active Directory Users and Computers
• Pin to Start or Pin to Taskbar

Windows 10

• Navigate to Control Panel
• Administrative Tools

• Right-click on Active Directory Users and Computers
• Pin to Start or Pin to Taskbar

Managing a group

1. Launch Active Directory Users and Computers from the newly created "Windows Administrative Tools" group.
2. Unfold kiewit.dartmouth.edu and then Security Groups or Research, depending upon the area where you were given access. 
3. If there is a subgrouping of the groups you were given access to manage, open that folder (e.g. in Research, click the Groups folder) and you will see something like this.
4. Right click on the group you wish to manage and select Properties.  Note: if you cannot see your group, there is a search facility: Action menu and then Find.  All the Research Computing groups begin with "rc-" so searching for that will bring up a complete list of groups for research computing.
5. Select the Members tab
6. To Add someone
   1. Click Add... and enter either their NetID or their name exactly as it appears in Active Directory including.  For example, John A. Doe
   2. Click Check Names and if you got their name/NetID correct, the missing half of NetID/name will be added to what you typed.  For example, John A. Doe (netid@dartmouth.edu)
   3. If you didn't get their name/NetID correct, a "Name Not Found" window will pop up.  Close that and try again.
7. To remove someone
   1. Highlight their name.
   2. Click Remove.

When you are finished, close the Active Directory Users and Computers Window.