A useful tip I've found people tend not to know about is that the Active Directory GUI tools (AD Users and Computers, Sites and Services, etc) are installed on every Windows 2000 and 2003 server regardless of whether or not the server is a domain controller. When the server is promoted to domain controller status, the shortcuts are just added to the Start Menu. To launch the tools without the shortcuts (e.g. from Start>Run) you just need to know the filenames of the tools:
- Active Directory Users and Computers - dsa.msc
- Active Directory Sites and Services - dssite.msc
- Active Directory Domains and Trusts - domain.msc
- ADSI Edit - adsiedit.msc
- Schema Management - schmmgmt.msc
- By default the DLL that supports this MMC is unregistered. To register it run "regsvr32 schmmgmt.msc"