I thought I replied to this. Apologies, I meant to. My first thought here is that you're running the tool in question with domain admin priv's, but the switches you have supplied are telling it to go out and touch DCs in other domains, so you're getting an access denied. DsReplicaGetInfo is the call made to obtain some of the replication information we use in this reporting.
Can you try and run the same command with enterprise admin cred's and report back? Thanks! ~Eric -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Svetlana Kouznetsova Sent: Monday, August 02, 2004 5:46 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Second call: Replication failed - access denied Hello, Last Monday I've asked here about strange error message I was getting on one of DC. Even though there were no responses, I would like to try my luck again. If anyone have seen same problem, could you please let me know. We have a forest with 3 domains here, two DC in each, W2K, SP4, native mode. We have deleted one of DC in one of the domain now, seized FSMO, clean up the metadata, dns records, everything. We've promoted a replacement DC (different machine, different name, different IP). Split roles between two DCs as one is Infrastructure master, the other - all the rest. When run netdiag, dcdiag, repadmin, etc on "oldest" DC in domain, everything was fine except from netdiag in "netdiag /v" mode only. Here is the output I'm getting from it: Starting test: Replications * Replications Check [Replications Check,SERS004] DsReplicaGetInfo(REPSTO) failed with error 8453, Replication access was denied.. [Replications Check,SERS015] DsReplicaGetInfo(REPSTO) failed with error 8453, Replication access was denied.. [Replications Check,MERCURYXULIB] DsReplicaGetInfo(REPSTO) failed with error 8453, Replication access was denied.. [Replications Check,SERS004] DsReplicaGetInfo(REPSTO) failed with error 8453, Replication access was denied.. [Replications Check,MERCURYXULIB] DsReplicaGetInfo(REPSTO) failed with error 8453, Replication access was denied.. [Replications Check,SERS015] DsReplicaGetInfo(REPSTO) failed with error 8453, Replication access was denied.. [Replications Check,SERS015] DsReplicaGetInfo(REPSTO) failed with error 8453, Replication access was denied.. [Replications Check,SERS004] DsReplicaGetInfo(REPSTO) failed with error 8453, Replication access was denied.. [Replications Check,SERS015] DsReplicaGetInfo(REPSTO) failed with error 8453, Replication access was denied.. [Replications Check,MERCURYXULIB] DsReplicaGetInfo(REPSTO) failed with error 8453, Replication access was denied.. ......................... BODLEY26 passed test Replications Any other utilities don't show anything wrong with replication. As nothing related in event logs. Largest replication delta in a forest - all in range 28-37 mins, no errors, no replication queues...:-/ When running repadmin /showreps on same DC, I'm getting in inbound partners an old demoted DC with [deleted DSA] marking. But I can't find any traces of it anywhere in AD. This error only shown on the DC, that has been in the domain for a while. MS KB329860 didn't help with this. Any ideas of the above error message, please? Many thanks in advance. Lana. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
