"Replicating Directory Changes All" error message when you run the Dcdiag.exe utility

View products that this article applies to.

SYMPTOMS

When you run the Microsoft Windows Server 2003 version of the Dcdiag.exe utility on a Windows 2000 Server-based computer, you may receive the following error message:

Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes All access rights for the naming context: CN=Schema,CN=Configuration,DC=Domain Name,DC=com
Error BUILTIN\Administrators doesn't have Replicating Directory Changes All access rights for the naming context: CN=Schema,CN=Configuration,DC=Domain Name,DC=com
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes All access rights for the naming context: CN=Configuration,DC=Domain Name,DC=com
Error BUILTIN\Administrators doesn't have Replicating Directory Changes All access rights for the naming context: CN=Configuration,DC=Domain Name,DC=com

The Windows 2000 Server-based computer is a member of a domain that does not have a Windows Server 2003 domain controller.

Back to the top

CAUSE

This issue occurs because there is no Replicating Directory Changes All permission in a Windows 2000 Server Active Directory directory service domain. When you run the Windows Server 2003 version of Dcdiag.exe in any Active Directory domain mode, all four permissions settings are checked. When there are no Windows Server 2003-based domain controllers in the domain, the Replicating Directory Changes All permission does not exist, and Dcdiag.exe reports the error message that is described in the "Symptoms" section of this article.

Back to the top

RESOLUTION

You can safely ignore this error message. However, to resolve this issue, use any one of the following methods.

Back to the top

Method 1

Run the Windows Server 2003 version of Dcdiag.exe with the /v switch when a domain does not contain any Windows Server 2003 domain controllers.

Back to the top

Method 2

Run the Windows 2000 Server version of Dcdiag.exe when a domain does not contain any Windows Server 2003 domain controllers. For additional information about the Windows 2000 Server Support Tools, click the following article number to view the article in the Microsoft Knowledge Base:

301423 (http://support.microsoft.com/kb/301423/ ) HOW TO: Install the Windows 2000 Support Tools to a Windows 2000 Server-Based Computer

Back to the top