.. Reminder for header structure: Parts (H1) : #################### with overline Chapters (H2) : ******************** with overline Sections (H3) : ==================== Subsections (H4) : -------------------- Subsubsections (H5) : ^^^^^^^^^^^^^^^^^^^^ Paragraphs (H6) : """"""""""""""""""""" .. |date| date:: .. meta:: :description: Installing the standard graphical management tools for your Active Directory :keywords: RSAT, Samba-AD, documentation, Windows7, Windows10 .. _samba_install_RSAT: ############################################################################ Installing the standard graphical management tools for your Active Directory ############################################################################ .. note:: The RSAT are remote administration tools for managing Windows operating systems. The remote server administration tools allow to use all MMC consoles available for Microsoft Active Directory with a Samba-AD. RSAT tools can only be installed on Professional Editions of Windows. ********************** Tranquil IT - OpenRSAT ********************** | Presentation: ============= The **OpenRSAT is a tool made by Tranquil IT** to provide a **free, open-source and cross-platform alternative to Microsoft RSAT**. Designed as a lightweight alternative to Microsoft's RSAT (Remote Server Administration Tools), OpenRSAT offers a modern, cross-platform graphical interface. This tool is **still in developement** to provide all the missing feature from Microsoft RSAT tools. | Features: ========= .. tabs:: .. tab:: Users and Computers - Complete management of domain users, groups, and computers. - Creation, deletion, and modification of entries. - Viewing object properties (with pages adapted to the object type). - Password reset. - Moving entries in the AD directory. .. tab:: Domain Name System (DNS) - Administration of domain DNS records. - List of DNS zones and records (A, AAAA, CNAME, PTR, MX, SRV, etc.). - Creation and deletion of DNS zones or entries. - Access to detailed properties for each DNS object. .. tab:: Site and Services - Configuration of AD replication and assignment of domain controllers to sites. - Listing and management of sites and subnets. - Creation of new sites and subnets via a simple and intuitive interface. .. tab:: Services and Interfaces - Set of views on the different partitions of the domain - Overview of the domain's root structure and naming context. - Management of forest-wide settings: replication topology, sites, and domain controllers. Centralized configuration for AD infrastructure. - Definition of all object classes (users, groups, computers) and their attributes. Extension capabilities for custom attributes or object types. - Lists all DNS records for the domain: A, AAAA, CNAME, MX, SRV, etc. - DNS records for forest-wide services. Ensures cross-domain replication and service location in multi-domain forests. - Metadata entry providing dynamic information about the AD directory structure. Used by tools and scripts to discover naming contexts, supported features, and domain controllers. Global presentation of the OpenRSAT .. figure:: images/openrsat-overview.gif :align: center :alt: OpenRSAT - Overview OpenRSAT - Overview An example of user management using OpenRSAT .. figure:: images/openrsat-aduc.gif :align: center :alt: OpenRSAT-ADUC OpenRSAT - ADUC Presentation | Dark Mode On OpenRSAT ===================== The **OpenRSAT** console features an elegant and modern **dark mode**, designed to provide a comfortable viewing experience, especially in prolonged or low-light working environments. This mode is automatically synchronised with the user's system preferences, ensuring seamless integration with their working environment. If you wish to switch modes, you will need to restart the console. **Benefits of dark mode:** - Reduces eye fatigue during prolonged use. - Better legibility in low-light environments. - Modern, uncluttered interface tailored to administrator preferences. Here are some examples of capture using different OS: .. tabs:: .. tab:: Linux .. figure:: images/linux-dark_aduc.png :align: center :alt: Linux-Dark_ADUC :scale: 70% Linux - Dark ADUC .. tab:: MacOS .. figure:: images/macos-dark_aduc.png :align: center :alt: MacOS-Dark_ADUC :scale: 40% MacOS - Dark ADUC .. tab:: Windows .. figure:: images/windows-dark_aduc.png :align: center :alt: Windows-Dark_ADUC :scale: 70% Windows - Dark ADUC | Download and Installation OpenRSAT Guide ======================================== .. tabs:: .. tab:: Linux The OpenRSAT can be installed and use on a variety of linux systems. You can download the latest release on our github page just here: https://github.com/tranquilit/openrsat/releases/latest. Open the assets section, and download the :file:`OpenRSAT-linux-x64` binary. .. tab:: MacOS The OpenRSAT can be installed and use on both *intel* and *arm* macos systems. You can download an installation file on our github page just here: https://github.com/tranquilit/openrsat/releases/latest. Open the assets section, and download the binary corresponding to your computer: :file:`OpenRSAT-darwin-x64.dmg` for intel computers, or :file:`OpenRSAT-darwin-arm64.dmg` for arm computers. .. tab:: Windows The OpenRSAT can be installed and use on both *x86* and *x64* windows systems. You can download the application on our github page just here: https://github.com/tranquilit/openrsat/releases/latest. Open the assets section, and download the binary corresponding to your computer: :file:`OpenRSAT-windows-x64.exe` for x64 computers, or :file:`OpenRSAT-windows-x86.exe` for x86 computers. | **************** Microsoft - RSAT **************** On Windows 7 ============ * From a Windows 7 workstation download the Remote Server Administration Tools alias `RSAT for Windows 7 `_. * Install the downloaded KB. The installation of the KB is very long (about 10 minutes). Once installed, go to :menuselection:`Start -> Control Panel -> Programs -> Enable or disable Windows features to use RSAT`. On Windows 10 ============= Version prior to 1809 --------------------- * From a Windows 10 workstation download the Remote Server Administration Tools alias `RSAT for Windows 10 `_. .. attention:: Here, a small peculiarity because you have to install the KB corresponding to your version of Windows10. To know it, run the command :command:`winver`. * Install the downloaded KB. The installation of the KB is very long (about 10 minutes). Once the KB is installed, go to :menuselection:`Start –> Control Panel –> Programs –> Enable or disable Windows features`. Version after 1809 ++++++++++++++++++ The RSAT tools on Windows10 Pro 1809 are no longer installed in KB but with the Powershell command line as they have become *optional features* (*Feature on Demand*). .. code-block:: ps1con Get-WindowsCapability -Online | ? Name -like 'RSAT*'|Where {$_.State -eq 'NotPresent'} |foreach {Add-WindowsCapability -online -name $_.Name} * To activate the RSAT tools, check the following features: * :menuselection:`Remote Server Administration Tools -> Feature Administration Tools-> Group Policy Management Tools`. * :menuselection:`Remote Server Administration Tools -> Role Administration Tools-> AD DS and AD LDS Tools -> check all`. * :me,uselection:`Remote Server Administration Tools -> Role Administration Tools -> AD DS Tools -> Check all except Server Tools for NIS`. * :menuselection:`Remote Server Administration Tools -> Role Administration Tools -> DNS Server Tools`. .. attention:: If you have configured your Samba-AD server with the RFC2307 option, or you have upgraded from Samba3-NT4 to Samba-AD, then you have to manage the linux UID / GID of the users, so activate in addition the :abbr:`NIS (Network Information Service)` options: * :menuselection:`Remote Server Administration Tools -> Role Administration Tools -> AD DS and AD LDS Tools -> AD DS Tools -> Server Tools for NIS`. .. figure:: images/Fonctionnalites_Windows.png :align: center :scale: 100% :alt: Windows function panels Windows function panels Accessing the RSAT console ========================== The MMC consoles can be found in :menuselection:`Control Panel -> System and Security -> Administrative Tools`.