Schema Problem

[Brian]

I ran DCDiag on a Windows 2000 Server and recieved the
following error.
Test: NCSecDesc
NT Authority\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes All
access rights for the naming context:
CN=Schema,CN=Configuratoin,DC=XXXXX,DC=com
Error BUITLIN\Administrators doesn't have Replicating
Directory Changes All
access rights for the naming context:
CN=Schema,CN=Configuratoin,DC=XXXXX,DC=com
NT Authority\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes All
access rights for the naming context:
CN=Configuratoin,DC=XXXXX,DC=com
Error BUITLIN\Administrators doesn't have Replicating
Directory Changes All
access rights for the naming context:
CN=Configuratoin,DC=XXXXX,DC=com
NT Authority\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes All
access rights for the naming context:
DC=XXXXX,DC=com
Error BUITLIN\Administrators doesn't have Replicating
Directory Changes All
access rights for the naming context:
DC=XXXXX,DC=com
(I replaced the company name with X's)

All the other tests within DCDiag PASS

I then followed MS KBA 285172 to allow Schema Updates but
I'm still getting the error message.

I concerned since we are in the process of upgrading to
Exchange 2003 needs to make Schema Updates.
Any Help will be greatly appreciated.

Thanks

 

[Cary Shultz [A.D. MVP]]

Brian,

Looks like a rights issue.

Make sure that the user account object 'Administrator' is a member of the
usual suspects ( Administrators, Domain Admins, Enterprise Admins, Schema
Admins ). But that is not really the problem here.

It looks like both the Administrators group and Enterprise Domain
Controllers group do not have the proper rights to the Schema, Configuration
and Domain partitions...

But that much you knew already.

Now, what are we going to do to fix this?

I have a couple of ideas. But, what do you think?

Cary