The easiest way to administrate a Samba Domain and Active Directory is using Microsofts RSAT (Remote Server Administration Tools) on a Windows workstation.
„samba-tool“ already contains many features for common administration jobs, but compared with the RSAT, it is still missing possibilities. Another advantage is, that using these tools, increases the available documentation (books, online, etc.), because it's the same way, than Windows administrators are doing the tasks.
- Windows 7: http://www.microsoft.com/downloads/details.aspx?FamilyID=7D2F6AD7-656B-4313-A005-4E344E43997D&displaylang=en
- Windows Vista: http://www.microsoft.com/downloads/details.aspx?FamilyId=9FF6E897-23CE-4A36-B7FC-D52065DE9960&displaylang=en
- Install RSAT using the downloaded installer.
- Open „Programs and Features“ (use the startmenu/metro search to locate the tool).
- Click to „Turn Windows features on or off“.
- Depending on the administrative tasks you want to perform and Samba supports, you can choose which features to install.
- Typically administrators install at least the following options (some are required to active additional tabs e. g. in ADUC; for example, displaying the "UNIX Attributes" tab needs "Server for NIS Tools" enabled):
- After clicking „OK“, the features are getting activated and can be found in the „Administrative tools“ menu.
Enabling the „Advanced Features“ view
Most of the RSAT tools hide content and menu options in their default setting. To enable all features and display the whole content in each program, go to the „View“ menu and activate „Advanced Features“. Typically this option is only visible, when you've marked the root of the tree view. E. g. in ADUC, you see the option in the „View“ menu only when you have clicked to the „Active Directory Users and Computers“ node.
Reporting incompatibilities and problems
If you encounter any problems using the Microsoft tools for administrating your Active Directory, please report a bug
Byside the problem description, please attach a level 10 debug log and if possible a network capture. A great help it is also, if you could provide a network capture against a Microsoft Server, to compare.