Return
-
Title
Why does the Watcher Service require the "Replicating Directory Changes" permission within Active Directory -
Description
This solution provides more background information as to why the Watcher Service requires the "Replicating Directory Changes" permission. Below is from the Minimum Permissions guide:
The Watcher Service requires that the Service Account created in step 1 have the "Replicating directory changes" permission on the Default Naming Context (DC=domain,DC=com) and the Configuration Context (CN=Configuration,DC=domain,DC=com) for this object and all descendant objects.
-
Resolution
The watcher service uses the permission "Replicating directory changes" to query AD to determine which objects have changed in the directory. For more information on this permission and how its used to query the domain, please see the below Microsoft Article:https://support.microsoft.com/en-gb/help/891995/how-to-poll-for-object-attribute-changes-in-active-directory-on-window