dcdiag fails with NCSecDesc error

[Victor Leonov]

Hello!
I ran dcdiag utility and it returned me that error:

Starting test: NCSecDesc
Error BUILTIN\Administrators doesn't have
Replicating Directory Changes
Replication Synchronization
Manage Replication Topology
access rights for the naming context:
DC=organization,DC=org
......................... SERVERNAME1 failed test NCSecDesc

Could you tell me please where can I check appropriate settings for that
issue.

Thanks a lot
Victor Leonov

 

[Simon Geary]

Looks like a permissions problem. Have a look on the security tab in AD
Users & Computers of the DC mentioned in dcdiag, you might need to turn on
advanced mode to get that tab.
Check for the permissions it is complaining about and see if you can add
them. If you have a healthy DC that passes dcdiag, try copying the ACL's
from there.