Active directory user and computers console, for a Delegated user.

MasterCheef used Ask the Experts™

All windows 2008 server.
I have delegated a user the rights to create and change users in an OU. Now I need to him to connect to the AD users and computers to be able to add users to the OU he will manage from his computer. (his machine is windows 2008).

here is what I have done.

I installed RSAT on his machine. but here is the issue i see with this. RSAT installs pretty much everything AD user & computers, AD sute and services, AD domain and trusts.
I do not want the users to have AD sites and services and AD domain and trusts, only need him to have Ad users and computers.

Can someone please let me know how can I make sure only AD user and computers is installed.
Also is there a way to install RSAT, Ad users and computers using group policy on multiple computers (i need to install this on 70 windows 2008 machines)

thank you for the help
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
right click the start button click the start menu tab then click customize, scroll all the way down and you will see the system administration tool click don't show.
You will now need to create a shortcut to the appropriate .msc file so they can access the AD UC
Create a shortcut on desktop to %SystemRoot%\system32\dsa.msc
Top Expert 2013
You can restrict the snap-ins that users can access using group policy.  More on that here:


Qlemo"Batchelor", Developer and EE Topic Advisor
Top Expert 2015

This question has been classified as abandoned and is being closed as part of the Cleanup Program.  See my comment at the end of the question for more details.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial