# Public

# Perform Active Directory Tasks Using AD Utility Appstream

## Purpose

The purpose of this procedure is to enable designated ITS staff, distributed IT staff, and other designated people to perform Active Directory tasks via a pre-configured, on-prem domain-joined utility Windows machine.  There are many situations where someone may have the responsibility to, for example, add and remove members to AD groups, but they do not themselves have a Windows machine or have the appropriate AD utilities installed.

## Directions

1. Go to <https://myapps.microsoft.com>

2. Choose the "ITS AD Utilities AppStream" tile.  If you don't see it, but expect to, contact Chi ([cshen@uri.ed](mailto:cshen@uri.edu)

3. Select the "AD Tools" icon  
[![image-1764629531458.png](https://notes.its.uri.edu/uploads/images/gallery/2025-12/scaled-1680-/K74dshtZe7sp1gko-image-1764629531458.png)](https://notes.its.uri.edu/uploads/images/gallery/2025-12/K74dshtZe7sp1gko-image-1764629531458.png)

4. Wait for session to start, up to 2 minutes:

[![image-1764629585831.png](https://notes.its.uri.edu/uploads/images/gallery/2025-12/scaled-1680-/XLPMZaCsuH2Rpu8D-image-1764629585831.png)](https://notes.its.uri.edu/uploads/images/gallery/2025-12/XLPMZaCsuH2Rpu8D-image-1764629585831.png)

5. Use SSO credentials:

[![image-1764629715663.png](https://notes.its.uri.edu/uploads/images/gallery/2025-12/scaled-1680-/2e8hTOqVliW4MvP2-image-1764629715663.png)](https://notes.its.uri.edu/uploads/images/gallery/2025-12/2e8hTOqVliW4MvP2-image-1764629715663.png)

6. Use "AD Users and Computers" console to perform needed task. (Always start from uri.ds.uri.edu)

[![image-1764629884075.png](https://notes.its.uri.edu/uploads/images/gallery/2025-12/scaled-1680-/wx2xpIGpc35Ta9JN-image-1764629884075.png)](https://notes.its.uri.edu/uploads/images/gallery/2025-12/wx2xpIGpc35Ta9JN-image-1764629884075.png)