Get-WindowsCapability -Name "Rsat*" -Online | Where State -eq Installed
Windows 11 prevents dumping of Kerberos tickets from LSASS. This breaks older AD tools that rely on pass-the-hash or credential harvesting. Tools like ADUC (MMC) are compatible; third-party tools must be Credential Guard-aware . active directory management tools windows 11
| Symptom | Root Cause | Fix | |---------|------------|-----| | ADUC opens but no domain objects | Win11 DNS suffix missing | Set Get-NetAdapter | Set-DnsClient -ConnectionSpecificSuffix "contoso.com" | | “Cannot find an object with identity” | Win11 Kerberos ticket issue | klist purge then klist get krbtgt | | RSAT won’t install (error 0x800f0950) | Missing Windows Update servicing stack | Install latest LCU (Cumulative Update) | | AD module crashes PowerShell 7 | Module not signed for PS7 | Use Windows PowerShell 5.1 ( powershell.exe ) | | Symptom | Root Cause | Fix |