Issues with ADAM replication, when running ADAM as a NETWORK SERVICE

we trying use adam (adam sp1) component of distributed application, running on top of windows server 2003 enterprise.

installed first adam instance on machine x, [fqdn: x.y.com] no issues.
x part of domain y, , y's dc correctly lists computer x part of domain.
network service account has default credentials, ship win2003.

installed replica of first adam instance on machine z [fqdn: z.y.com], same environment properties x, again designated run network service.

seem have issues data replicating across z x, , vice-versa.

firewalls disabled on both machines.

event viewer logs on z adam instance source have following message:

-------------------------------------------------------------------------------------------------------------
attempt establish replication link following writable directory partition failed.
directory partition:
cn=schema,cn=configuration,cn={03879b26-81a6-450f-beca-720a057749df}
source directory service:
cn=ntds settings,cn=x$instancename,cn=servers,cn=default-first-site-name,cn=sites,cn=configuration,cn={03879b26-81a6-450f-beca-720a057749df}
source directory service address:
x.y.com:922152c0-5377-4366-abbd-747612d83535
intersite transport (if any):

directory service unable replicate source directory service until problem corrected.
user action
verify if source directory service accessible or network connectivity available.

additional data
error value:
5 access denied.

more information, see , support center @ http://go.microsoft.com/fwlink/events.asp.
-------------------------------------------------------------------------------------------------------------


hitting "access denied." message on running adam service network service.
installing adam run domain user admin credentials not lead same error.

guess pretty sure environment/setup issue, baffled, since machines running win2k3 pretty out of box, , haven't touched network service security credentials/permissions et al on either machine.
have tried rebooting both machines, did not help.
have verified machines able ping each other, , since all's when running adam domain user, clueless whats going wrong.

anyone have tips on how debug issue seeing?

 

hi,

 

please verify permission set correctly:

 

1.    both computer accounts , network service account member of role cn=instances (cn=roles, cn=configuration, cn={guid}).

2.    network service has been granted read , write permission on folder c:\program files\microsoft adam\instance\data , files in data folder.

 

if issue persists, run command dsdiag /s:servername:port /v > output.txt on both servers, zip , upload output file following space:

 

https://sftasia.one.microsoft.com/choosetransfer.aspx?key=5574ced3-e842-48a4-bfdd-710d8fc7315e

password: ]qkr55hf@utwp

Windows Server  >  Directory Services