MicrosoftOFFTOPIC: Alban1999 from my experience DSUC has three features from the top of my mind that DSAC doesn't.
1. Copy users - one should not do this anyway. If you use role based permissions model, users would not end up to have a plethora of security groups that cannot be reconstructed.
On the other hand everything you build in DSAC is visible in the PowerShell history so you could automate it from a template.
2. Creating contacts - I believe this is no longer necessary with modern Exchange
3. You cannot delete domain controllers and sub items - Certainly a security thing
Searching is much easier with DSAC and more complete but needs a bit of rethinking. It would have been great if it had support for wildcards or in terms thinking of PowerShell -contains, but it does only support begins with. It needs a bit of new muscle memory but when you compare both searching is much more powerful. Mind some search options are not visible from the start and rather hidden.
Ultimately (in both) you could do LDAP search
Examples:
- ADUC you cannot open certain AD properties from DSUC search, only if you open the user directly from the OU
- ADUC you cannot jump from an object to the OU
- ADUC is picky in context searching for computers or other items, DSAC can even search AD items for you like DNS and other items others would look into ADSI.
I agree on the state of the DHCP / DNS and AD extensions in WAC, but I believe that is another team working on that. Maybe the focus is Azure AD, dunno.
