Add-WindowsCapability -Name "Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0" -Online -LimitAccess -Source "https://www.catalog.update.microsoft.com" (Note: The ~0.0.1.0 is the generic version number. Use Get-WindowsCapability to see the exact version on your build.) You cannot deploy this via GPO startup script easily because the user must be logged in? Actually, you can. Use DISM in an offline or online state.
Windows 11 treats RSAT like any other app. If you are a on your Windows 11 box but only a Domain User in AD, you hit a wall. install active directory users and computers windows 11
Real fix: Don't browse the entire domain. Type the OU path directly in ADUC (View > Filter Options > Customize > Show "Advanced Features" then drag the path into the navigation pane). Yes. With one caveat: Windows 11 22H2 and later require RSAT tools that match the build. You cannot use 21H2 RSAT on 23H2. Add-WindowsCapability -Name "Rsat
# Run as Admin Get-AppxPackage -Name "Microsoft.Windows.RSAT" | Remove-AppxPackage -AllUsers Remove-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved" -Name "E5E8F684-9E09-420C-87D0-1E3EBE49D898" -Force # Reboot # Then reinstall via PowerShell Windows 11 has a feature called "Randomized Source Port" for DNS and LDAP by default. While great for security, it wreaks havoc on high-latency WAN links to RODCs. Use DISM in an offline or online state
Open regedit and navigate to: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters Create a new DWORD (32-bit): Disabledynamic** (Wait, that's for DNS. For LDAP specifically, ensure your TCP Offloading is disabled on your NIC driver).