Solved

HELP!!!  I am trying to customize the installation of the RSAT for a Windows 7 Pro PC

Posted on 2010-11-29
7
360 Views
Last Modified: 2012-05-10
Hi, I am trying to customize the installation of the RSAT for a Windows 7 Pro PC.  I use to be able to use command line switches and such to install the AD admin tools for XP PCs.  I know that the delegations is controlled on the AD itself, but I would rather not have the user even see the other AD tools, like AD Sites & Services, AD Domain Trusts, etc.  All I want them to see is the AD Computers & Users.

I was wondering if there is a way to customize installation of the RSAT on a Windows 7 Pro PC.

Thanks in advance.
0
Comment
Question by:rsnellman
  • 4
  • 3
7 Comments
 
LVL 47

Expert Comment

by:dstewartjr
ID: 34234531
0
 

Author Comment

by:rsnellman
ID: 34267964
Unless I am overlooking something on those links you sent, it is not installing the way I would like it to.

All I want installed is the ADUC...nothing else.  Is this possible with RSAT on Windows 7 Pro?
0
 

Author Comment

by:rsnellman
ID: 34269358
OK, I found in your link how to enable/disable using Dism command.  However, I am wondering can I turn off all the unneccessary features or do they all need to be there for ADUC.

Features in question:
RemoteServerAdministrationTools
RemoteServerAdministrationTools-Roles
RemoteServerAdministrationTools-Roles-AD
RemoteServerAdministrationTools-AD-DS
RemoteServerAdministrationTools-Roles-AD-DS-SnapIns
RemoteServerAdministrationTools-Roles-Ad-DS-AdministrativeCenter
RemoteServerAdministrationTools-Roles-AD-PowerShell

All I am looking for is giving access to certain AD OUs for certain personell.

Thanks in advance.
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 
LVL 47

Accepted Solution

by:
dstewartjr earned 500 total points
ID: 34269521
Sorry, I havent been able to actually test this yet. But have you tried "Restrict users to the explicitly permitted list of snap-ins" ?



http://technet.microsoft.com/en-us/library/cc975962.aspx
0
 

Author Comment

by:rsnellman
ID: 34275016
No, not yet, but I have manually removed the shortcuts, .dll files and .msc files with success.

Not sure how secure that will be.
0
 

Author Comment

by:rsnellman
ID: 34284897
Ok, I believe it is working now.  Thanks to dstewartjr's link for "Restrict users...snap-ins" via GP.  And deleting the shortcuts under Administrative Tools.  I think this will work just fine.

Thanks again.
0
 
LVL 47

Expert Comment

by:dstewartjr
ID: 34285927
Glad to get something that worked out for ya :)
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
This Micro Tutorial will give you a basic overview of Windows Live Photo Gallery and show you various editing filters and touches to photos you can apply. This will be demonstrated using Windows Live Photo Gallery on Windows 7 operating system.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now