Hi everyone
I'm doing a survey of the environment to start the process migration from 2003 to 2008.Getting fix some flaws but has a replication that can not even understand the reason for the error.in DCdiag, ALL DC's (22) are presenting the message below:
Doing primary tests
Testing server: Site_Berrini_SP \ VALENCIA
Starting test: NCSecDesc
Error BUILTIN \ Administrators does not have
Replicating Directory Changes
Replication Synchronization
Manage Replication Topology
access rights for the naming context:
CTIS DC =, DC = local
.........................VALENCIA failed test NCSecDesc
==================================================
Error BUILTIN \ Administrators does not have
Replicating Directory Changes
Replication Synchronization
Manage Replication Topology
access rights for the naming context:
CTIS DC =, DC = local
.........................JARI failed test NCSecDesc
Dsquery group realized a builtin \ administrators and the accounts below are all blocked for security and a single account that is demonstrating the SID.I wonder if the problem arises from such account and if I can delete them if the problem is being generated by it.
"CN = ntp service, CN = Users, DC = CTIS, DC = local"
"Testerm CN =, OU = Admins, OU = DF, CTIS OU =, DC = CTIS, DC = local"
"TR109386 CN =, CN = Users, DC = CTIS, DC = local"
"CN = Administrator, CN = Users, DC = ctiscdi \ 0ADEL: 4cf8b1eb-5c42-4f03-960c-2259898a7d68, CTIS DC =, DC = local"
"CN = Project Cacic, OU = Services, OU = DF, CTIS OU =, DC = CTIS, DC = local"
"User CN = UP. Proxy, OU = Services, OU = DF, CTIS OU =, DC = CTIS, DC = local"
"CN = User Lock USB and CDROM, OU = Admins, OU = DF, CTIS OU =, DC = CTIS, DC = local"
"Cn = admin-CTIS, BLOCKED OR =, OU = Users, OU = DF, CTIS OU =, DC = CTIS, DC = local"
thank you
I'm doing a survey of the environment to start the process migration from 2003 to 2008.Getting fix some flaws but has a replication that can not even understand the reason for the error.in DCdiag, ALL DC's (22) are presenting the message below:
Doing primary tests
Testing server: Site_Berrini_SP \ VALENCIA
Starting test: NCSecDesc
Error BUILTIN \ Administrators does not have
Replicating Directory Changes
Replication Synchronization
Manage Replication Topology
access rights for the naming context:
CTIS DC =, DC = local
.........................VALENCIA failed test NCSecDesc
==================================================
Error BUILTIN \ Administrators does not have
Replicating Directory Changes
Replication Synchronization
Manage Replication Topology
access rights for the naming context:
CTIS DC =, DC = local
.........................JARI failed test NCSecDesc
Dsquery group realized a builtin \ administrators and the accounts below are all blocked for security and a single account that is demonstrating the SID.I wonder if the problem arises from such account and if I can delete them if the problem is being generated by it.
"CN = ntp service, CN = Users, DC = CTIS, DC = local"
"Testerm CN =, OU = Admins, OU = DF, CTIS OU =, DC = CTIS, DC = local"
"TR109386 CN =, CN = Users, DC = CTIS, DC = local"
"CN = Administrator, CN = Users, DC = ctiscdi \ 0ADEL: 4cf8b1eb-5c42-4f03-960c-2259898a7d68, CTIS DC =, DC = local"
"CN = Project Cacic, OU = Services, OU = DF, CTIS OU =, DC = CTIS, DC = local"
"User CN = UP. Proxy, OU = Services, OU = DF, CTIS OU =, DC = CTIS, DC = local"
"CN = User Lock USB and CDROM, OU = Admins, OU = DF, CTIS OU =, DC = CTIS, DC = local"
"Cn = admin-CTIS, BLOCKED OR =, OU = Users, OU = DF, CTIS OU =, DC = CTIS, DC = local"
thank you