This has come up before but I don't think anyone was looked for a way to identify the files and register the required DLL(s) for the ADUC tab.
That said, the proper way to configure this is to delegate permissions to the users you want for the specific tasks you want, blocking access to the Management console doesn't actually prevent users from executing those server administration tasks.
http://blogs.pointbridge.com/Blogs/schertz_jeff/Pages/Post.aspx?_ID=40