Can one install domain services tools (such as AD computers and users) on a Windows 2008 R2 server without the server becoming a domain controller? This is analogous to the Remote Server Administration Tools for Windows 7 or via mmc smap-ins.
My thought was that one would simply not run dcpromo prior to installing the Domain Services role, but a sysadmin much more experienced is suggesting otherwise.
In this case, I'm not trying to run the full server manager on the remote server that is the domain controller, just AD objects. GPO feature is already installable.