To open the interface, you can use the Command Prompt (CMD), PowerShell, or the Run dialog (Win + R). : Type dsa.msc and press Enter .
Sometimes you need to run the console with elevated credentials (different than your current login). From CMD, you can use the runas command:
# Get user details Get-ADUser jdoe -Properties * active directory users and computers cmd
Set-ADUser -Identity jdoe -Add @extensionAttribute1="value" Set-ADUser -Identity jdoe -Replace @description="New description"
Example of PowerShell power:
This deep feature set allows you to fully manage Active Directory Users and Computers — ideal for automation, remote administration, and scripting tasks.
While you cannot easily create saved queries via text commands, you can open the console with a specific saved query view if you have created one beforehand. This is useful for quickly auditing "Locked Out Users" or "Admin Accounts." To open the interface, you can use the
When a user locks themselves out, speed is key:
Instead of opening ADUC, finding the user, right-clicking, and selecting "Reset Password," use: From CMD, you can use the runas command:
(Note: net user is a native Windows CMD command that interacts with AD when the /domain switch is used.)
