When you run the Windows Server 2003 version of the Dcdiag.exe utility on a Windows 2000 Server, you receive:

Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes All access rights for the naming context: CN=Schema,CN=Configuration,DC=<DomainName>,DC=com

Error BUILTIN\Administrators doesn't have Replicating Directory Changes All access rights for the naming context: CN=Schema,CN=Configuration,DC=<DomainName>,DC=com

Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have Replicating Directory Changes All access rights for the naming context: CN=Configuration,DC=<DomainName>,DC=com

Error BUILTIN\Administrators doesn't have Replicating Directory Changes All access rights for the naming context: CN=Configuration,DC=<DomainName>,DC=com

This behavior will occur if there are no Windows Server 2003 domain controllers in the Windows 2000 domain. The Replicating Directory Changes All access right does NOT exist in a Windows 2000 Server.

NOTE: You can safely ignore this error message in a Windows 2000 domain without any Windows Server 2003 domain controllers.

To prevent the error, use either of the following:

  • Use the /v switch when using the Windows Server 2003 version of Dcdiag.exe and the domain does NOT contain any Windows Server 2003 domain controllers.

  • Use the Windows 2000 Server version of Dcdiag.exe when the domain does NOT contain any Windows Server 2003 domain controllers.

NOTE: See How do I install the Windows 2000 Support Tools to a Windows 2000 Server?