Permissions Necessary for Monitoring Servers Using Active Directory Replication Monitor (Replmon.exe)

Article translations Article translations
Article ID: 246721 - View products that this article applies to.
This article was previously published under Q246721
This article has been archived. It is offered "as is" and will no longer be updated.
Expand all | Collapse all

Symptoms

If you use Replication Monitor (Replmon.exe) and you add a server to monitor, when you connect to certain partitions the status of the directory partition is not shown and the icon for the directory partition may contain a yellow circle with an exclamation point (a "warning" symbol).

In addition, the following event log entry may be present in the Directory service event log if the logging level for NTDS Replication is set to 3 or higher:
Event Type: Information
Event Source: NTDS Replication
Event Category: Replication
Event ID: 1508
Date: 11/18/1999
Time: 3:35:06 PM
User: Domain\User
Computer: Server-Name
Description:
Internal event: The Directory Service processed the replication state information request with status code 8453.

Cause

This behavior occurs because you do not have the required permissions to read the status of the particular directory partition.

Resolution

The minimum permission necessary is "Manage Replication Topology" for "This object only" on the appropriate directory partition. For the domain directory partition, you can grant this permission through the Active Directory Users and Computers snap-in. For all others, you can use Adsiedit.msc, which is an administrative tool included in the Support tools for Windows 2000. You can install Adsiedit.msc from the Support\Tools folder of the Windows 2000 Server or Windows 2000 Professional CD-ROM.

To delegate the permission to monitor domain directory partition status:
  1. Open the Active Directory Users and Computers snap-in as an administrator of the domain.
  2. On the View menu, click Advanced Features so there is a check mark next to it.
  3. Right-click the root domain object, and then click Properties.
  4. On the Security tab, click Add.
  5. Select the user or group to which you wan to delegate the permissions, and then click OK.
  6. With the user or group still highlighted, click the check box in the Allow column for the following permission:
    Manage Replication Topology
  7. Click OK.
  8. Have the user refresh the Replmon statistics. The user should now be able to see the replication status for the directory partition.
To delegate the permission to monitor the schema and configuration directory partitions:
  1. Install the Windows 2000 Support tools if they are not already installed.
  2. Run Setup.exe from the Support\Tools folder of the Windows 2000 Server or Windows 2000 Professional CD-ROM.
  3. Run Adsiedit.msc as an administrator of the root domain of the forest and expand the Configuration Container or Schema node, whichever is appropriate.
  4. Each node contains a child object that begins with "CN=". Right-click this object, and then click Properties.
  5. On the Security tab, click Add.
  6. Double-click the user or group to which you want to delegate permissions, and then click OK.
  7. With the user or group highlighted, click the check box in the Allow column for the following permission:
    Manage Replication Topology
  8. Click OK.
  9. Have the user running Replmon refresh the statistics. The user should now be able to see the replication status for the directory partition.
NOTE: Depending on the domain controller the user is monitoring, if the permissions change is made by the administrator on a different domain controller, the change needs to replicate to the server the user is monitoring for the effect to take place.

More information

Active Directory Replication Monitor (Replmon.exe) is a tool included in the Support tools that you can use to monitor and troubleshoot Active Directory replication in Windows 2000.

Properties

Article ID: 246721 - Last Review: October 26, 2013 - Revision: 5.0
Applies to
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
Keywords: 
kbnosurvey kbarchive kberrmsg kbnetwork kbprb KB246721

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com