New-ADUser -Name "John Smith" -SamAccountName "jsmith" -UserPrincipalName "jsmith@contoso.com" -GivenName "John" -Surname "Smith" -Enabled $true -AccountPassword (ConvertTo-SecureString "P@ssw0rd" -AsPlainText -Force)
The primary tool for managing objects, resetting passwords, and organizing OUs.
Note: Most advanced AD management still requires RSAT.
When you enable the Active Directory Domain Services (AD DS) tools, you gain access to the following native management consoles:
RSAT allows IT admins to manage AD, DNS, DHCP, Group Policy, and more from a Windows 11 PC.
Acts as a proxy between the admin and AD, preventing direct access to the database.