HELP!!! I am trying to customize the installation of the RSAT for a Windows 7 Pro PC

Hi, I am trying to customize the installation of the RSAT for a Windows 7 Pro PC.  I use to be able to use command line switches and such to install the AD admin tools for XP PCs.  I know that the delegations is controlled on the AD itself, but I would rather not have the user even see the other AD tools, like AD Sites & Services, AD Domain Trusts, etc.  All I want them to see is the AD Computers & Users.

I was wondering if there is a way to customize installation of the RSAT on a Windows 7 Pro PC.

Thanks in advance.
rsnellmanIT ManagerAsked:
Who is Participating?
Donald StewartConnect With a Mentor Network AdministratorCommented:
Sorry, I havent been able to actually test this yet. But have you tried "Restrict users to the explicitly permitted list of snap-ins" ?
rsnellmanIT ManagerAuthor Commented:
Unless I am overlooking something on those links you sent, it is not installing the way I would like it to.

All I want installed is the ADUC...nothing else.  Is this possible with RSAT on Windows 7 Pro?
Easily Design & Build Your Next Website

Squarespace’s all-in-one platform gives you everything you need to express yourself creatively online, whether it is with a domain, website, or online store. Get started with your free trial today, and when ready, take 10% off your first purchase with offer code 'EXPERTS'.

rsnellmanIT ManagerAuthor Commented:
OK, I found in your link how to enable/disable using Dism command.  However, I am wondering can I turn off all the unneccessary features or do they all need to be there for ADUC.

Features in question:

All I am looking for is giving access to certain AD OUs for certain personell.

Thanks in advance.
rsnellmanIT ManagerAuthor Commented:
No, not yet, but I have manually removed the shortcuts, .dll files and .msc files with success.

Not sure how secure that will be.
rsnellmanIT ManagerAuthor Commented:
Ok, I believe it is working now.  Thanks to dstewartjr's link for "Restrict users...snap-ins" via GP.  And deleting the shortcuts under Administrative Tools.  I think this will work just fine.

Thanks again.
Donald StewartNetwork AdministratorCommented:
Glad to get something that worked out for ya :)
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.