Active Directory Domain Services could not replicate the directory partition CN=Configuration,DC=xxxx,DC=LOCAL from the remote Active Directory Domain Controller xxx.xxxx.LOCAL. "Replication access was denied."

Question

I face an issue while promoting new Domain Controller (Additional Domain Controller); this domain controller must be the 7th DC in the forset/domain, the promotion is failed each time with the Following error:

The operation failed because:

Active Directory Domain Services could not replicate the directory partition CN=Configuration,DC=xxxx,DC=LOCAL from the remote Active Directory Domain Controller xxx.xxxx.LOCAL.

"Replication access was denied."

The user account I used for promotion is member of: Enterprise Admins, Schema Admins, Domain Admins, Administrators, also I set it in Domain Controllers Group, with full controll/permission on Configuration Partition (Adsi Edit)

I am able to promote Read Only Domain Controller (RODC) but the issue appreaes only during promoting new Writable DC, which lead to failed promotion process.

appreciate Any help.

Answer 1

Thankfully I am able to solve this issue, it was due to Deny permission on “Replicating Directory Changes All” role for Administrators group on configuration partition at “ADSIEdit”, when I changed it to allow the issue resolved successfully.

Answer 2

Hello,

Have you run repadmin to verify that bi-directional replication is healthy on all other DC's?

Check that DNS role is installed and it may help to make sure server is a domain member

Miguel Fra
https://www.falconitservices.com

Answer 3

You can work through this one.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/replication-error-8453

--please don't forget to upvote and Accept as answer if the reply is helpful--