JSI Tip 7578. When you run the Dcdiag.exe utility, you receive 'Replicating Directory Changes All' access rights error messages?

Jerold Schulman

December 16, 2003

1 Min Read
ITPro Today logo in a gray background | ITPro Today

When you run the Windows Server 2003 version of the Dcdiag.exe utility on a Windows 2000 Server, you receive:

Error NT AUTHORITYENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes All access rights for the naming context: CN=Schema,CN=Configuration,DC=,DC=com

Error BUILTINAdministrators doesn't have Replicating Directory Changes All access rights for the naming context: CN=Schema,CN=Configuration,DC=,DC=com

Error NT AUTHORITYENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes All access rights for the naming context: CN=Configuration,DC=,DC=com

Error BUILTINAdministrators doesn't have Replicating Directory Changes All access rights for the naming context: CN=Configuration,DC=,DC=com

This behavior will occur if there are no Windows Server 2003 domain controllers in the Windows 2000 domain. The Replicating Directory Changes All access right does NOT exist in a Windows 2000 Server.

NOTE: You can safely ignore this error message in a Windows 2000 domain without any Windows Server 2003 domain controllers.

To prevent the error, use either of the following:

  • Use the /v switch when using the Windows Server 2003 version of Dcdiag.exe and the domain does NOT contain any Windows Server 2003 domain controllers.

  • Use the Windows 2000 Server version of Dcdiag.exe when the domain does NOT contain any Windows Server 2003 domain controllers.

NOTE: See How do I install the Windows 2000 Support Tools to a Windows 2000 Server?



Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like