-
Title
Cannot replicate and see "Access is denied" in the replication log -
Description
When replicating from the Desktop Authority Manager, you receive the following error: “Errors were encountered during replication”.
The Replication Log shows: “Access is denied”
The User Management and or Computer Management replication status is not updating (turning green) in Deployment Options | Server Manager | Service Management.
-
Cause
This error is most commonly caused by permissions applied to the Netlogon share on one or more domain controllers. This can occur on a domain controller if the Netlogon share permissions or SYSVOL security permissions have been altered.
-
Resolution
1. Select Deployment Settings | Server Manager| Service Management.
2. Expand the drop down for "Other Tasks"
3. Select "View Replication Log"
The log will show which domain controller cannot be replicated to. The account used to log into the Desktop Authority Manager Console copies files from the \\DAServerName\SLSCRIPTS$ and the \\DAServerName\DADevicePolicyMaster$ shares to the NETLOGON and SYSVOL\DomainName\Policies\Desktop Authority\Device Policy Master shares on the domain controllers. An account that is a member of the Domain Admins security group should have the necessary access to the SYSVOL and NETLOGON shares by default.
To test a possible issue with the copy operation. Logged on as the user that received the Access is denied error when replicating manually try to copy a file(s) from the DA shares to the domain controller shares. Was an Access is denied error received when doing the manual copy as well?Use the information on the hyperlinks below to verify that the permissions set on the SYSVOL and Netlogon folders are correct.
SYSVOL Inherits NTFS Permissions From Root Drive