Microsoft KB Archive/829306

= &quot;Replicating Directory Changes All&quot; error message when you run the Dcdiag.exe utility =

Article ID: 829306

Article Last Modified on 10/30/2006

-

APPLIES TO


 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)

-



SYMPTOMS
When you run the Microsoft Windows Server 2003 version of the Dcdiag.exe utility on a Windows 2000 Server-based computer, you may receive the following error message:

Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes All access rights for the naming context: CN=Schema,CN=Configuration,DC= ,DC=com

Error BUILTIN\Administrators doesn't have Replicating Directory Changes All access rights for the naming context: CN=Schema,CN=Configuration,DC= ,DC=com

Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes All access rights for the naming context: CN=Configuration,DC= ,DC=com

Error BUILTIN\Administrators doesn't have Replicating Directory Changes All access rights for the naming context: CN=Configuration,DC= ,DC=com

The Windows 2000 Server-based computer is a member of a domain that does not have a Windows Server 2003 domain controller.



CAUSE
This issue occurs because there is no Replicating Directory Changes All permission in a Windows 2000 Server Active Directory directory service domain. When you run the Windows Server 2003 version of Dcdiag.exe in any Active Directory domain mode, all four permissions settings are checked. When there are no Windows Server 2003-based domain controllers in the domain, the Replicating Directory Changes All permission does not exist, and Dcdiag.exe reports the error message that is described in the &quot;Symptoms&quot; section of this article.



RESOLUTION
You can safely ignore this error message. However, to resolve this issue, use any one of the following methods.

Method 1
Run the Windows Server 2003 version of Dcdiag.exe with the /v switch when a domain does not contain any Windows Server 2003 domain controllers.

Method 2
Run the Windows 2000 Server version of Dcdiag.exe when a domain does not contain any Windows Server 2003 domain controllers. For additional information about the Windows 2000 Server Support Tools, click the following article number to view the article in the Microsoft Knowledge Base:

301423 HOW TO: Install the Windows 2000 Support Tools to a Windows 2000 Server-Based Computer

Additional query words: replicating directory changes all error message dcdiag

Keywords: kbnofix kbprb KB829306

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.