dcdiag fails with NCSecDesc error

  • Thread starter Thread starter Victor Leonov
  • Start date Start date
V

Victor Leonov

Hello!
I ran dcdiag utility and it returned me that error:

Starting test: NCSecDesc
Error BUILTIN\Administrators doesn't have
Replicating Directory Changes
Replication Synchronization
Manage Replication Topology
access rights for the naming context:
DC=organization,DC=org
......................... SERVERNAME1 failed test NCSecDesc

Could you tell me please where can I check appropriate settings for that
issue.

Thanks a lot
Victor Leonov
 
Looks like a permissions problem. Have a look on the security tab in AD
Users & Computers of the DC mentioned in dcdiag, you might need to turn on
advanced mode to get that tab.
Check for the permissions it is complaining about and see if you can add
them. If you have a healthy DC that passes dcdiag, try copying the ACL's
from there.
 
Back
Top