Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

"Replicating Directory Changes All" error message when you run the Dcdiag.exe utility


View products that this article applies to.

Symptoms

When you run the Microsoft Windows Server 2003 version of the Dcdiag.exe utility on a Windows 2000 Server-based computer, you may receive the following error message:
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes All access rights for the naming context: CN=Schema,CN=Configuration,DC=Domain Name,DC=com
Error BUILTIN\Administrators doesn't have Replicating Directory Changes All access rights for the naming context: CN=Schema,CN=Configuration,DC=Domain Name,DC=com
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes All access rights for the naming context: CN=Configuration,DC=Domain Name,DC=com
Error BUILTIN\Administrators doesn't have Replicating Directory Changes All access rights for the naming context: CN=Configuration,DC=Domain Name,DC=com
The Windows 2000 Server-based computer is a member of a domain that does not have a Windows Server 2003 domain controller.

↑ Back to the top


Cause

This issue occurs because there is no Replicating Directory Changes All permission in a Windows 2000 Server Active Directory directory service domain. When you run the Windows Server 2003 version of Dcdiag.exe in any Active Directory domain mode, all four permissions settings are checked. When there are no Windows Server 2003-based domain controllers in the domain, the Replicating Directory Changes All permission does not exist, and Dcdiag.exe reports the error message that is described in the "Symptoms" section of this article.

↑ Back to the top


Resolution

You can safely ignore this error message. However, to resolve this issue, use any one of the following methods.

Method 1

Run the Windows Server 2003 version of Dcdiag.exe with the /v switch when a domain does not contain any Windows Server 2003 domain controllers.

Method 2

Run the Windows 2000 Server version of Dcdiag.exe when a domain does not contain any Windows Server 2003 domain controllers. For additional information about the Windows 2000 Server Support Tools, click the following article number to view the article in the Microsoft Knowledge Base:
301423 HOW TO: Install the Windows 2000 Support Tools to a Windows 2000 Server-Based Computer

↑ Back to the top


Keywords: KB829306, kbprb, kbnofix

↑ Back to the top

Article Info
Article ID : 829306
Revision : 5
Created on : 10/30/2006
Published on : 10/30/2006
Exists online : False
Views : 191