Active Directory Replication Errors Sensor issue

This one is rather straight forward.

- Get the domain controller for the given domain name

- Invoke Knowledge Consistency Checker (kcc)

- Enumerate all other domain controllers that are known to the domain controller for errors

- Report the total error count to PRTG

See also http://msdn.microsoft.com/en-us/library/system.directoryservices.activedirectory.domaincontroller.checkreplicationconsistency(v=vs.90).aspx

please try to run the ADSReplFailures.exe from command line to check which DC reports the errors.

file should be in the PRTG Program folder

e.g. C:\Program Files\PRTG Network Monitor\Sensor System

A completely new AD Replication sensor is available since

PRTG Network Monitor 14.2.9.1690

I am also having this error. Using a Domain Admin works fine, using our PRTG monitoring account which has access to Monitor Active Directory Replication gets and error.

Does anyone know what other permissions I need to give to my monitoring account to use this sensor?

Google and other kb articles don't give anything other than use a Domain Admin (*would prefer not to) or add the monitor setting as above.

Hi there,

Thank you for the post.

We recommend to use an administrative account, since the certain user rights are not known. Did you already tried to use an user which has full read rights?

Moritz - I used an account will full read rights and it didn't work, then tried with my Domain Admin account and it works fine.

I don't really want to use a Domain Admin account for this sensor.

Hello,

The needed permissions are set by Microsoft so there is not much we can do about it. Unfortunately, Microsoft is not very clear about what exact permissions a user needs for this, which is why we recommend using a domain admin.