Hi, we have an AD DS with: Domain functional level: Windows Server 2012 R2 Forest Functional level: Windows Server 2012 R2 but I am unable to find the Replicating Directory Changes permission when delegating control on an OU. I was looking on forums but no solution worked on me. I can see in printscreens where it should be but I just don't have it there. I dunno where is the problem.

This article has the details on how to set replication directory changes using the cal dialog in aduc https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/grant-replicating-directory-changes-permission-adma-service Gary.

Unable to find Replicating Directory Changes permission in AD DS

Accepted answer

Gary Reynolds 9,391 Reputation points

2022-06-23T08:50:35.813+00:00

This article has the details on how to set replication directory changes using the cal dialog in aduc

https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/grant-replicating-directory-changes-permission-adma-service

Gary.
Please sign in to rate this answer.
Milan 61 Reputation points

2022-06-23T08:59:27.05+00:00

Thank you for response but I tried that. I tried also set in in ADSI Edit but it is same as before. That permission is just missing for a user account.

Gary Reynolds 9,391 Reputation points

2022-06-23T09:08:03.417+00:00

You have to set the permission on the root of the partition, you can't set it on a sub ou.

Gary.

Milan 61 Reputation points

2022-06-23T09:40:52.603+00:00

That is a good point to know. Unfortunately on root OUs it is still missing. I tried it through ADSI Edit and through Delegation Control Wizard on multiple root OUs.

Gary Reynolds 9,391 Reputation points

2022-06-23T11:06:16.643+00:00

You can only set the permission on the root

Milan 61 Reputation points

2022-06-23T11:14:59.67+00:00

IOh.... yes I understand now. My bad. Anyway thank you for help! I appreciate it.
Sign in to comment

Unable to find Replicating Directory Changes permission in AD DS

0 additional answers