• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 389
  • Last Modified:

HELP!!! I am trying to customize the installation of the RSAT for a Windows 7 Pro PC

Hi, I am trying to customize the installation of the RSAT for a Windows 7 Pro PC.  I use to be able to use command line switches and such to install the AD admin tools for XP PCs.  I know that the delegations is controlled on the AD itself, but I would rather not have the user even see the other AD tools, like AD Sites & Services, AD Domain Trusts, etc.  All I want them to see is the AD Computers & Users.

I was wondering if there is a way to customize installation of the RSAT on a Windows 7 Pro PC.

Thanks in advance.
0
rsnellman
Asked:
rsnellman
  • 4
  • 3
1 Solution
 
rsnellmanIT ManagerAuthor Commented:
Unless I am overlooking something on those links you sent, it is not installing the way I would like it to.

All I want installed is the ADUC...nothing else.  Is this possible with RSAT on Windows 7 Pro?
0
 
rsnellmanIT ManagerAuthor Commented:
OK, I found in your link how to enable/disable using Dism command.  However, I am wondering can I turn off all the unneccessary features or do they all need to be there for ADUC.

Features in question:
RemoteServerAdministrationTools
RemoteServerAdministrationTools-Roles
RemoteServerAdministrationTools-Roles-AD
RemoteServerAdministrationTools-AD-DS
RemoteServerAdministrationTools-Roles-AD-DS-SnapIns
RemoteServerAdministrationTools-Roles-Ad-DS-AdministrativeCenter
RemoteServerAdministrationTools-Roles-AD-PowerShell

All I am looking for is giving access to certain AD OUs for certain personell.

Thanks in advance.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
DonNetwork AdministratorCommented:
Sorry, I havent been able to actually test this yet. But have you tried "Restrict users to the explicitly permitted list of snap-ins" ?



http://technet.microsoft.com/en-us/library/cc975962.aspx
0
 
rsnellmanIT ManagerAuthor Commented:
No, not yet, but I have manually removed the shortcuts, .dll files and .msc files with success.

Not sure how secure that will be.
0
 
rsnellmanIT ManagerAuthor Commented:
Ok, I believe it is working now.  Thanks to dstewartjr's link for "Restrict users...snap-ins" via GP.  And deleting the shortcuts under Administrative Tools.  I think this will work just fine.

Thanks again.
0
 
DonNetwork AdministratorCommented:
Glad to get something that worked out for ya :)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: C++ 11 Fundamentals

This course will introduce you to C++ 11 and teach you about syntax fundamentals.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now