DCDIAG - Error - Replicating Directory Changes in Filtered Set

DCDIAG - Error - Replicating Directory Changes in Filtered Set

dcdiag returns : ENTERPRISE DOMAIN CONTROLLERS doesn’t have Replicating Directory Changes In Filtered Set
 
customer runs dcdiag and get error :

Starting test: NCSecDesc
Error NT AUTHORITYENTERPRISE DOMAIN CONTROLLERS doesn’t have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=ForestDnsZones,dc=example-cloud,dc=com
Error NT AUTHORITYENTERPRISE DOMAIN CONTROLLERS doesn’t have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=its,dc=example-cloud,dc=com
......................... ITS-ADDC-SERV1 failed test NCSecDesc
 
Resolution Microsoft technet url : http://technet2.microsoft.com/windowsserver2008/en/library/6c438941-f9b5-4edb-a9ee-1781526389e51033.mspx?mfr=true

Explains that you may need to run the command : adprep /rodcprep

NCSecDesc in DCDIAG is to check that the security descriptors on the application directory partition heads have appropriate permissions for replication.

It is an expected issue when you promote a Windows Server 2008 domain controller in a Windows Server 2003 domain without preparing RODC (read-only domain controller) in the forest by running ’adprep /rodcprep’. If you do not plan to add an RODC to the forest, it is safe to ignore it. Otherwise, you can run "adprep /rodcprep".

    Can't find the KB

    Unable to find the KB to address your issue ?  

      • Recent Articles

      • Lenovo Unified Workspace End-of-Life Questions and Answers

        Will the shutdown of LUW servers and access to downloads affect my server licensing? No, the shutdown of the customer servers and access to the product and licensing downloads will not affect your server licensing. This license is downloaded and ...

      • How do I determine my Unified Workspace license expiration date?

        The best method for determining the licensing information including the expiration date of your Unified Workspace license: Login to your 8090 management console on each server This may take remoting into each LUW server and relay, opening a browser, ...

      • Lenovo Unified Workspace 7.0.2.13 Released

        Highlights of Unified Workspace 7.0.2.13 Before you install: Please view the installation notes here. 7.0.2.13 requires a 7.0 license file. Below is a list of enhancements and fixes released in Unified Workspace 7.0.2.13 Fixed external storage ...

      • LanSchool Documentation Guides

        LanSchool Classic Teacher Console The LanSchool Teacher Console is the interface teachers will use to manage their classroom and students. It contains all the tools necessary for a teacher to effectively interact with students and create a ...

      • Lenovo Unified Workspace 7.0.1.41 Released

        Highlights of Unified Workspace 7.0.1.41 Before you install: Please view the installation notes here. 7.0.1.41 requires a 7.0 license file. Below is a list of enhancements and fixes for Unified Workspace 7.0.1.41 Updated Log4j Updated Java Updated ...

      • Related Articles

      • List of Active Directory Error Codes

        The error codes for Active Directory can be found at this Microsoft URL. http://msdn.microsoft.com/en-us/library/ms681381%28VS.85%29.aspx

      • DNS Test : NameNotFoundException error

        The customer is using MS AD and is in the stoneware management console and did a DNS Test. The following Errors were given. INFO: Attempting to locate a domain controller in DNS for domain: company.org ERROR: javax.naming.NameNotFoundException: DNS ...

      • LDAP Error Codes

        AcceptSecurityContext error, data 52e means "bad password" AcceptSecurityContext error, data 525 means "bad user name" AcceptSecurityContext error, data 773 means "password expiring" or similar.  Standard error codes Standard LDAP errors Error / data ...

      • Verify Active Directory SSL

        How can I check if my Microsoft Active Directory Domain controller / LDAP Server has SSL ?   The following URL has a nice write up about the Microsoft Tool called LDP.exe http://www.computerperformance.co.uk/w2k3/utilities/ldp.htm You can download ...

      • CIFS Error Codes

        Question: What do the CIFS / SMB error codes mean ? Solution: For a large table of NT codes, see https://customer.lenovosoftware.com/support/techdocs/v6/cifs-nt-codes.txt    jcifs code        nt code 1 0x00000000 0x00000000 NT_STATUS_OK 0 0xc0000001 ...