Hi,
When i run the DCdiag in my domain controller, i am getting the below mentioned error stating failed test
NCSecDesc!
Domain controller - Windows 2008 R2
Domain functional level - Windows 208 R2
-----
Starting test: NCSecDesc
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=ForestDnsZones,DC=xxx,DC=com
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=xxx,DC=com
......................... TLDC2 failed test NCSecDesc
I found similar issue thread in technet and the suggestion was to prepare a RODC in Domain.
My question is, how RODC can help to avoid those errors.....?? need to know the how reasons, please help??