How to Install and Manage Remote Server Administration Tools (RSAT) in Windows 11

System administrators who manage Windows Server roles, Active Directory domain controllers, DHCP scopes, DNS infrastructure, and Group Policy objects often rely on Remote Server Administration Tools (RSAT). Instead of initiating remote desktop sessions directly into sensitive production domain controllers, RSAT allows IT professionals to securely run native administrative consoles from their local Windows 11 workstation.

In modern versions of Windows 11, RSAT is fully integrated into the operating system as Features on Demand (FOD), eliminating the legacy requirement of downloading standalone standalone MSU installer packages from external download portals.

Installing RSAT via Windows 11 Settings

For administrators who prefer graphical user interfaces, RSAT components can be added through the Settings application:

1. Open the Settings app by pressing Win + I.
2. Select System from the left-hand navigation pane, then click Optional features.
3. Next to Add an optional feature, click the View features button.
4. In the search field, type RSAT to filter available packages.
5. Select the checkboxes adjacent to the specific administrative modules you require, such as:
   • RSAT: Active Directory Domain Services and Lightweight Directory Services Tools
   • RSAT: Group Policy Management Tools
   • RSAT: DNS Server Tools
   • RSAT: DHCP Server Tools
   • RSAT: Server Manager
6. Click Next, review your selections, and click Install.

Windows 11 downloads and installs the required binaries in the background. Once finished, administrative shortcuts appear under the Windows Tools folder in the Start Menu.

For enterprise feature deployment methods, review our guide on how to audit and install optional features in Windows 11 using PowerShell.

Installing and Querying RSAT Using PowerShell

Automating RSAT deployment across enterprise support workstations is significantly faster using administrative PowerShell cmdlets:

1. Right-click the Start button and select Terminal (Admin) or PowerShell (Admin).
2. To audit all available RSAT capabilities and their current installation states, run:

   Get-WindowsCapability -Name "Rsat*" -Online | Select-Object -Property DisplayName, State

3. To install a specific individual capability (such as Active Directory tools):

   Add-WindowsCapability -Online -Name "Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0"

4. To install all RSAT administrative tools simultaneously in a single command pipeline:

   Get-WindowsCapability -Name "Rsat*" -Online | Where-Object { $_.State -ne "Installed" } | ForEach-Object { Add-WindowsCapability -Online -Name $_.Name }

Managing and Launching Installed RSAT Consoles

After installation, you can launch management snap-ins directly from the Run dialogue (Win + R) or Start Menu:

• Active Directory Users and Computers: dsa.msc
• Group Policy Management Console: gpmc.msc
• DNS Management: dnsmgmt.msc
• DHCP Management: dhcpmgmt.msc
• Server Manager: ServerManager.exe

Troubleshooting RSAT Installation Error 0x800f0954 on Corporate Networks

In enterprise environments where workstations pull software updates from an internal Windows Server Update Services (WSUS) or Configuration Manager server, RSAT installation may fail with error code 0x800f0954 or 0x8024402c. This occurs because WSUS typically does not host Feature on Demand payloads.

1. Press Win + R, type gpedit.msc, and press Enter to open the Local Group Policy Editor.
2. Navigate to:

   Computer Configuration > Administrative Templates > System

3. Locate and double-click the policy named Specify settings for optional component installation and component repair.
4. Set the policy status to Enabled.
5. Under the Options pane, tick the checkbox labeled Download repair content and optional features directly from Windows Update instead of Windows Server Update Services (WSUS).
6. Click Apply and OK.
7. Open PowerShell as Administrator and force a policy refresh:

   gpupdate /force

Retry the installation command, and Windows 11 will bypass internal WSUS servers to download the required RSAT packages directly from Microsoft’s public content delivery network.