DC diag error

starting test: ncsecdesc
   error abc\enterprise read-only domain controllers doesn't have
      replicating directory changes
      replicating directory changes all
      replicating directory changes in filtered set
   access rights naming context:
   cn=schema,cn=configuration,dc=presidency,dc=gov,dc=eg
   error abc\enterprise read-only domain controllers doesn't have
      replicating directory changes
   access rights naming context:
   cn=configuration,dc=abc,dc=gov,dc=eg
   error nt authority\enterprise domain controllers doesn't have
      replicating directory changes in filtered set
   access rights naming context:
   dc=abc,dc=gov,dc=eg
   error abc\enterprise read-only domain controllers doesn't have
      replicating directory changes
   access rights naming context:
   dc=abc,dc=gov,dc=eg
   ......................... primary-dc failed test ncsecdesc

---

ibrahim waz

if have not run adprep /rodcprep, dcdiag.exe returns error when runs ncsecdesc test. test checks security descriptors on naming context heads have appropriate permissions replication. error indicates enterprise domain controllers group not have replicating directory changes in filtered set access rights dns application directory partitions.

if not plan add rodc forest, can disregard error. if plan add rodc forest, must run adprep /rodcprep

reference link:
http://blogs.technet.com/b/ravindrapamidi/archive/2008/10/15/windows-server-2008-domain-controllers-fail-ncsecdesc-naming-context-security-descriptors-test-when-running-dcdiag.aspx
http://support.microsoft.com/kb/967482


hope helps

regards,
sandesh dubey.
-------------------------------
mcse|mcsa:messaging|mcts|mcitp:enterprise adminitrator
blog: http://sandeshdubey.wordpress.com
posting provided no warranties, , confers no rights.

Windows Server  >  Directory Services