In a project I’m working on I’m using DSInternals, (and PowerShell 5.2)
The command Get-ADReplAccount -all -server $Servername always returns replication access was denied, when running with my domain admin on production or test env ofc it works but when switch on both env’s to the project user that suppose to run the command, it always fails.
From what I have seen online, the required permission on the domain root object is:
-
Replicate Changes
-
Replicate Changes All
-
Replicate Changes In Filtered Set
Even after adding them I run into the same error. I have tested about everything I could think of.
-
checked that there’s no deny ACLs or ACEs
-
booted a new virtual dc running its own domain to confirm the issue is with the permission and not something in production blocking it
-
tried giving the required permissions via adsi edit on default naming context and configuration partitions
-
tried using get-adreplaccount -userprinciplename on a single account
And honestly so much more.
Any help would be great!
