The console snapped open like a surgeon’s scalpel. No splash screen. No delay. Just the tree view of his domain: contoso.local .

But here's what Marcus realized that night: the true power of isn't the GUI—it's the command that launches it. dsa.msc is the key.

Instead of hunting through individual user objects, he used another command-line trick from the same console. He selected the HR department OU, clicked Find , and searched for a user, jdiaz . In her Member Of tab, he saw the problem: her primary group, HR-RW , was missing. A sync error had dropped her from the group.

Marcus, a junior system administrator, stared at his screen. It was 11:47 PM, and the accounting department’s file server, FS-ACC-02 , had just gone offline. The error log showed one thing: "Access Denied."

Right-click. . The Account tab told him everything. A red X next to "Account is locked out" .

He unlocked it, clicked OK , and within ten seconds, the file server began responding again.

dsa.msc And pressed Enter.