Re: DCDIAG: failed test NCSecDesc

Howdie!

On 09.03.2010 09:14, Drazen wrote:
> Starting test: NCSecDesc
>
> * Security Permissions check for all NC's on DC NEWDC.
> The forest is not ready for RODC. Will skip checking ERODC
> ACEs.
> * Security Permissions Check for
>
> DC=ForestDnsZones,DC=domain,DC=local,DC=hr
> (NDNC,Version 3)
> Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't
> have

Not it isn't fatal. Newer versions of DCDiag just check a few more
things than previous ones. You get that error because DCDiag found that
there some permissions are not ready for RODC-introduction in the
environment. You'll have to re-run adprep with /rodcprep again to make
sure permissions are setup well if you ever decide to install a RODC in
your organization.

But for now, this isn't a fatal issue nor is performance or data in risk.

Cheers,
Florian