SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm creating a user in Active directory with PowerShell and need to assign it "Replicate Changes" rights.

I can't find anywhere online how to do this.

share|improve this question


$Identity = "domain\account"

$RootDSE = [ADSI]"LDAP://RootDSE"
$DefaultNamingContext = $RootDse.defaultNamingContext
$ConfigurationNamingContext = $RootDse.configurationNamingContext
$UserPrincipal = New-Object Security.Principal.NTAccount("$Identity")

DSACLS "$DefaultNamingContext" /G "$($UserPrincipal):CA;Replicating Directory Changes"
DSACLS "$ConfigurationNamingContext" /G "$($UserPrincipal):CA;Replicating Directory Changes"
share|improve this answer
very awesome to know! maybe they can incorporate this with the autospinstaller script. – Mike Jun 27 '14 at 13:13
I don't suppose they will, as you will need some kind of admin access to AD, which you have on your own DEV machine (usually) but most likely not when installing the servers. – Cameron Verhelst Jul 1 '14 at 10:50

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.