View → Advanced Features reveals:

: Creating new user accounts, resetting passwords, and enabling or disabling accounts.

Administrators use ADUC for routine maintenance and security tasks, including:

# Create user dsadd user "CN=John Doe,OU=Users,DC=contoso,DC=com" -samid jdoe -pwd P@ssw0rd -upn jdoe@contoso.com -fn John -ln Doe -disabled no

| Scope | Can contain | Can be member of | Use case | |-------|-------------|------------------|----------| | | Users/groups from any domain | Same domain only | Assign permissions to local resources | | Global | Users/groups from same domain | Any group in any domain | Organize users with similar roles | | Universal | Any user/group from any domain | Any group in any domain | Large, forest-wide access (e.g., all-employee email) |

For decades, ADUC was the only way to graphically manage AD. However, Microsoft has introduced the and the Microsoft 365 Admin Center .