Reading the Active Directory on a Windows Domain Client

I like to poke around in what probably isn't my business, so naturally I want to browse the domain's Active Directory. This can be done fairly easily from a domain client.

First, you'll need administrative rights on the local computer. That has its own post.

Then, you'll need to install the extension pack that contains Remote Server Administration snap-ins for the Microsoft Management Console. Here's the pack for Windows 7, which might also work for 8.

Once that's installed, you'll need to go to "Turn Windows features on or off" in the Programs and Features and actually enable those snap-ins you just installed. It'll be called something like "Remote Server Administration Tools" with lots of sub-options: check it all or just pick out the things you care about. I recommend the following:

• Feature Administration Tools
• Group Policy Management Tools
• Role Administration Tools
• AD DS and AD LDS Tools
• DHCP Server Tools
• Server Manager

Then, once that finishes setting up, open the Microsoft Management Console by running "mmc". Add the "Active Directory Users and Computers" snap-in using the appropriate option under File. (You could also add the other Active Directory stuff for bonus configuration viewage.) After you snap that in, you'll see a list of domains whose Active Directories you can browse. Expand one to produce a list of categories, each of which contains a bunch of fascinating stuff.

You'll be able to look through it all, but not modify anything unless you're also a domain admin.