| Event Id | 1508 |
| Source | NTDS Replication |
| Description | Internal event: The Directory Service processed the replication state information request with status code 8453 |
| Event Information | "According to Microsoft : CAUSE : This behavior occurs because you do not have the required permissions to read the status of the particular directory partition RESOLUTION : The minimum permission necessary is ""Manage Replication Topology"" for ""This object only"" on the appropriate directory partition. For the domain directory partition, you can grant this permission through the Active Directory Users and Computers snap-in. For all others, you can use Adsiedit.msc, which is an administrative tool included in the Support tools for Windows 2000. You can install Adsiedit.msc from the Support\Tools folder of the Windows 2000 Server or Windows 2000 Professional CD-ROM. To delegate the permission to monitor domain directory partition status: 1. Open the Active Directory Users and Computers snap-in as an administrator of the domain 2. On the View menu, click Advanced Features so there is a check mark next to it. 3. Right-click the root domain object, and then click Properties. 4. On the Security tab, click Add. 5. Select the user or group to which you wan to delegate the permissions, and then click OK. 6. With the user or group still highlighted, click the check box in the Allow column for the following permission.Manage Replication Topology 7. Click OK. 8. Have the user refresh the Replmon statistics. The user should now be able to see the replication status for the directory partition. To delegate the permission to monitor the schema and configuration directory partitions: 1. Install the Windows 2000 Support tools if they are not already installed. 2. Run Setup.exe from the Support\Tools folder of the Windows 2000 Server or Windows 2000 Professional CD-ROM. 3. Run Adsiedit.msc as an administrator of the root domain of the forest and expand the Configuration Container or Schema node, whichever is appropriate. 4. Each node contains a child object that begins with ""CN="". R |
| Reference Links | Permissions Necessary for Monitoring Servers Using Active Directory Replication Monitor (Replmon.exe) |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.