The continued reliance on ADUC in Windows 10 20H2 also invites a discussion about relevance. As Microsoft pushes Azure Active Directory (now Microsoft Entra ID) and modern management solutions like Microsoft Endpoint Manager (Intune), the traditional ADUC console remains a staple for hybrid environments. Windows 10 20H2 was released during a period of massive remote work adoption, making the ability to manage on-premise Active Directory from a secure, updated client device more critical than ever. While the cloud offers modern interfaces, ADUC provides the granular control required for complex on-premise infrastructures, ensuring that the tool’s availability on Windows 10 remains a necessity rather than a legacy convenience.
First and foremost, it is crucial to clarify that ADUC is not an independent executable. It is a snap-in that relies on the broader infrastructure of the Windows operating system and the .NET Framework. For versions of Windows 10 prior to the October 2018 Update (1809), administrators had to manually download an RSAT MSI package from the Microsoft Download Center. However, starting with Windows 10 1809 and continuing through , Microsoft integrated RSAT directly into the operating system as a set of Features on Demand (FOD) . Consequently, there is no standalone "ADUC for Windows 10 20H2 download" link on Microsoft’s website. Instead, the tool is already present on your machine, waiting to be activated.
You must have local admin rights on the PC to add system features. How to Install ADUC on Windows 10 20H2
Furthermore, the shift to Features on Demand meant that searching for a download link online was no longer the correct workflow. This posed a challenge for new administrators who might be following outdated documentation. The "solid" understanding of this topic, therefore, hinges on recognizing that the "download" is now an internal OS provisioning process. The binaries are fetched from Windows Update, seamlessly integrating the management layer with the client OS layer. The continued reliance on ADUC in Windows 10
This transition was significant for two reasons. First, it streamlined the deployment process. Administrators no longer needed to chase down the correct installer package for the specific OS build (x86 or x64). Second, it signaled a philosophical change: the tools were no longer an add-on but a native capability waiting to be unlocked. In the context of Windows 10 20H2, the "download" is essentially a payload fetched from Windows Update rather than an external executable, ensuring that the management tools are always perfectly version-matched to the client operating system.
: You must be running Windows 10 Pro, Enterprise, or Education . Home editions do not support RSAT.
Manage User Accounts in Active Directory Users and Computers While the cloud offers modern interfaces, ADUC provides
Windows needs to download the feature files from Microsoft’s update servers.
The ability to run ADUC locally on Windows 10 20H2 represents a significant evolution in administrative efficiency. Prior to RSAT integration, administrators often had to log into a physical server or use a dedicated management jump box, increasing latency and security risks. By enabling ADUC on a standard Windows 10 client, organizations can enforce tighter security policies (e.g., not allowing interactive logins to servers) while still providing helpdesk and IT staff with the full power of directory management from their everyday laptops. This aligns perfectly with modern "Zero Trust" and least-privilege security models.
You must be running Windows 10 Pro , Enterprise , or Education . Home editions do not support RSAT. For versions of Windows 10 prior to the
This is the most straightforward way to enable the tool through the graphical interface. Open (Win + I) and navigate to Apps .
The specific procedure to enable Active Directory Users and Computers in Windows 10 20H2 highlights the operating system's enterprise focus. An administrator navigates to Settings > Apps > Optional Features . From there, the user clicks "Add a feature" and searches for "RSAT: Active Directory Domain Services and Lightweight Directory Services Tools."
Follow these steps to enable the Remote Server Administration Tools (RSAT) which include ADUC: