dcdiag

[Greg Rasner]

I am getting an error in my dcdiag that I can't find much help with in other
sources. Can anyone help me?

Starting test: NCSecDesc
* Security Permissions Check for
DC=avigen,DC=com
(Domain,Version 2)
Error AVIGEN\Domain Controllers doesn't have
Replicating Directory Changes All
access rights for the naming context:
DC=avigen,DC=com
......................... dc2 failed test NCSecDesc

Any help greatly appreciated.

Greg Rasner, CCNA, MCSE

 

[Steve Dodson [MSFT]]

Greg,

I would verify a few items:

1) All current DC's are up and functioning properly (replication, etc.)
2) Check the security on your domain object using adsiedit and verify:

ENTERPRISE DOMAIN CONTROLLERS has the following permissions:

Replicating Directory Changes
Replication Synchronization
Manage Replication Topology

Hope that helps!

Steve Dodson [MSFT]
Directory Services
--------------------

Reply-To: "Greg Rasner" <[email protected]>
From: "Greg Rasner" <[email protected]>
Subject: dcdiag
Date: Mon, 6 Oct 2003 15:26:51 -0700
Lines: 18
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Message-ID: <[email protected]>
Newsgroups: microsoft.public.win2000.active_directory
NNTP-Posting-Host: avigen5.avigen.com 66.117.144.144
Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.active_directory:50609
X-Tomcat-NG: microsoft.public.win2000.active_directory

I am getting an error in my dcdiag that I can't find much help with in other
sources. Can anyone help me?

Starting test: NCSecDesc
* Security Permissions Check for
DC=avigen,DC=com
(Domain,Version 2)
Error AVIGEN\Domain Controllers doesn't have
Replicating Directory Changes All
access rights for the naming context:
DC=avigen,DC=com
......................... dc2 failed test NCSecDesc

Any help greatly appreciated.

Greg Rasner, CCNA, MCSE

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.

 

[mmcgough [MSFT]]

This might help...
When you run the Windows 2003 version of the DCDiag.exe utility against a
domain that does not have any Windows Server 2003 domain controllers, you
may receive the following error messages:

Cause
__________________________________________
The "Replicating Directory Changes All" permission does not exist in a
Windows 2000 Active Directory. It was first introduced in Windows Server
2003.
When the Windows Server 2003 version of DCDiag.exe is run, it checks for
these 4 permissions settings regardless of the domain mode. If there are no
domain controllers running Windows Server 2003, then this permission does
not exist, and DCDiag.exe will report back the failure.
This posting is provided "AS IS" with no warranties, and confers no rights.