JSI Tip 7578. When you run the Dcdiag.exe utility, you receive 'Replicating Directory Changes All' access rights error messages?

When you run the Windows Server 2003 version of the Dcdiag.exe utility on a Windows 2000 Server, you receive:

Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes All access rights for the naming context: CN=Schema,CN=Configuration,DC=<DomainName>,DC=com

Error BUILTIN\Administrators doesn't have Replicating Directory Changes All access rights for the naming context: CN=Schema,CN=Configuration,DC=<DomainName>,DC=com

Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes All access rights for the naming context: CN=Configuration,DC=<DomainName>,DC=com

Error BUILTIN\Administrators doesn't have Replicating Directory Changes All access rights for the naming context: CN=Configuration,DC=<DomainName>,DC=com

This behavior will occur if there are no Windows Server 2003 domain controllers in the Windows 2000 domain. The Replicating Directory Changes All access right does NOT exist in a Windows 2000 Server.

NOTE: You can safely ignore this error message in a Windows 2000 domain without any Windows Server 2003 domain controllers.

To prevent the error, use either of the following:

  • Use the /v switch when using the Windows Server 2003 version of Dcdiag.exe and the domain does NOT contain any Windows Server 2003 domain controllers.

  • Use the Windows 2000 Server version of Dcdiag.exe when the domain does NOT contain any Windows Server 2003 domain controllers.

NOTE: See How do I install the Windows 2000 Support Tools to a Windows 2000 Server?



Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish