2008 R2 DC: NCSecDesc(Read-Only Dc?)

Hi-

Researched the error below - seems most say ignore and not worry about it.

Happens now when we run dcdiag in our 2003 Domain w/ upgraded "2008" - mixed-mide Schema.

This error is only on our 2008 DC's:

        Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

         Replicating Directory Changes In Filtered Set

         access rights for the naming context:

         DC=DomainDnsZones,DC=domain,DC=local

         ......................... DC2 failed test NCSecDesc

We "might" plan on putting in a Read-only DC in the future controller - but what if we don't - will the eror exist always?

Anyone know how to remedy?

Thx.

-P