Unable to find Replicating Directory Changes permission in AD DS

Question

Unable to find Replicating Directory Changes permission in AD DS

Mi1an 56

Hi,

we have an AD DS with:
Domain functional level:
Windows Server 2012 R2
Forest Functional level:
Windows Server 2012 R2

but I am unable to find the Replicating Directory Changes permission when delegating control on an OU. I was looking on forums but no solution worked on me. I can see in printscreens where it should be but I just don't have it there.

I dunno where is the problem.

Answer 1

Gary Reynolds 8,836

This article has the details on how to set replication directory changes using the cal dialog in aduc

https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/grant-replicating-directory-changes-permission-adma-service

Gary.

Mi1an 56 Reputation points

2022-06-23T08:59:27.05+00:00

Thank you for response but I tried that. I tried also set in in ADSI Edit but it is same as before. That permission is just missing for a user account.
Gary Reynolds 8,836 Reputation points

2022-06-23T09:08:03.417+00:00

You have to set the permission on the root of the partition, you can't set it on a sub ou.

Gary.
Mi1an 56 Reputation points

2022-06-23T09:40:52.603+00:00

That is a good point to know. Unfortunately on root OUs it is still missing. I tried it through ADSI Edit and through Delegation Control Wizard on multiple root OUs.
Gary Reynolds 8,836 Reputation points

2022-06-23T11:06:16.643+00:00

You can only set the permission on the root
Mi1an 56 Reputation points

2022-06-23T11:14:59.67+00:00

IOh.... yes I understand now. My bad. Anyway thank you for help! I appreciate it.

Unable to find Replicating Directory Changes permission in AD DS

0 additional answers

Activity