"Replicating Directory Changes All" error message when you run the Dcdiag.exe utility

Article translations Article translations
Article ID: 829306 - View products that this article applies to.
Expand all | Collapse all

On This Page

SYMPTOMS

When you run the Microsoft Windows Server 2003 version of the Dcdiag.exe utility on a Windows 2000 Server-based computer, you may receive the following error message:
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes All access rights for the naming context: CN=Schema,CN=Configuration,DC=Domain Name,DC=com
Error BUILTIN\Administrators doesn't have Replicating Directory Changes All access rights for the naming context: CN=Schema,CN=Configuration,DC=Domain Name,DC=com
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes All access rights for the naming context: CN=Configuration,DC=Domain Name,DC=com
Error BUILTIN\Administrators doesn't have Replicating Directory Changes All access rights for the naming context: CN=Configuration,DC=Domain Name,DC=com
The Windows 2000 Server-based computer is a member of a domain that does not have a Windows Server 2003 domain controller.

CAUSE

This issue occurs because there is no Replicating Directory Changes All permission in a Windows 2000 Server Active Directory directory service domain. When you run the Windows Server 2003 version of Dcdiag.exe in any Active Directory domain mode, all four permissions settings are checked. When there are no Windows Server 2003-based domain controllers in the domain, the Replicating Directory Changes All permission does not exist, and Dcdiag.exe reports the error message that is described in the "Symptoms" section of this article.

RESOLUTION

You can safely ignore this error message. However, to resolve this issue, use any one of the following methods.

Method 1

Run the Windows Server 2003 version of Dcdiag.exe with the /v switch when a domain does not contain any Windows Server 2003 domain controllers.

Method 2

Run the Windows 2000 Server version of Dcdiag.exe when a domain does not contain any Windows Server 2003 domain controllers. For additional information about the Windows 2000 Server Support Tools, click the following article number to view the article in the Microsoft Knowledge Base:
301423 HOW TO: Install the Windows 2000 Support Tools to a Windows 2000 Server-Based Computer

Properties

Article ID: 829306 - Last Review: October 30, 2006 - Revision: 3.2
APPLIES TO
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
Keywords: 
kbnofix kbprb KB829306

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com