AD MP: The script ‘AD Replication Monitoring’ encountered a permissions error.

DESCRIPTION


The script ‘AD Replication Monitoring’ encountered a permissions error. The script failed to update this DCs monitoring object in the naming context ‘DC=DomainDnsZones,DC=sadad,DC=com’ because access was denied. Alter the permissions for this naming context so that the script can add this container, or change the parameters for this script to stop monitoring this naming context.

The error returned was: ‘General access denied error’ (0x80070005)

 

CAUSE

 

This is due to lack of permissions for MOM ACTION account on MOMLatencyMonitors container in Active Directory (this container is hidden).

 

WORKAROUND


  1. Open Active Directory Users & Computers (DSA.msc).
  2. Click on view and select Advanced Features.
  3. Click on MOMLatencyMonitors container and click on properties (you should see your DC’s in this container).
  4. Click on security tab and add MOM ACTION account and give it Full Control.
  5. Restart the MOM service.

Leave a Reply

Your email address will not be published. Required fields are marked *