Samba AD management from Windows
We need install Windows 2003 Adminpak into Windows XP in order to use GUI tools to manage the domain. Before you begin, make sure that the domain administrators have administrative rights to control your computer.(To give any user administrative rights in Windows XP Pro, right click My Computer, select Manage-> choose Groups-> double click Administrators and add members from domain into the member list. When you add members from Active Directory, it will prompt you to enter an Active Directory username and password).
Step 1: Installing Windows Remote Administration Tools onto Windows
- Download the Windows Remote Administration Tools from:
- Follow the "Install RSAT" instructions
Windows XP Pro
Administration Tools Pack & Support Tools
- Download adminpak and supporttools from:
- If you installed an older version of the adminpak, you'll notice the dial-in tab is missing from property pages. Just follow the link above to get SP2 which does not have this issue.
- Run through the installation.
- Press start->run, type 'dsa.msc', if a window 'active directory users and computers' prompt up, it mean you had install adminpak it successfully. You can also find this at Start>Programs>Administrative Tools, which should have a lot more items now.
- Go to c:\Program Files\Support Tools to check whether the support tools were installed correctly; if yes, then your XP workstation is ready to manage the Samba 4 Active Directory.
Group Policy Management Console
- You may also find the Group Policy Management Console useful. You can download it from
- This is primarily useful when you have larger installs and are managing many machines. You may need to download the .NET Framework first.
Step 2: Viewing Samba Active Directory Content
- When logged on as a Domain Administrator, start the Active Directory Users and Computers Snap-In, either by clicking Start -> Programs\Administrative Tools\Active Directory Users and Computers, or by clicking Start -> Run 'dsa.msc'
- Expand the samdom.example.com tree to see existing objects in the domain.
- Note: You can also manage users using the normal Windows AD user management tools.