Replicate Directory Changes permission RRS feed


  • Hi,

    Here is how you would use it if not researched already:

    dsacls DC=Domain,DC=Com /G "S-1-5-21-146546546561321354654-654:CA;Replicating Directory Changes" 

    You can find multiple ways of getting account SID, howerver here are couple:

    1. Use psgetsid tool from sysinternals: http://technet.microsoft.com/en-us/sysinternals/bb897417

      c:\users\administrator> psgetsid domain\username <-- this will return the SID

    2. User powershell:

     $userName = New-Object Security.Principal.NTAccount("domainname", "username")

     $userName.Translate([System.Security.Principal.SecurityIdentifier]).value <-- this will return the SID.

    Finally, here is the link to download DSACLS tool: http://support.microsoft.com/kb/892777

    Ketan Thakkar | Microsoft Online Community Support
    • Proposed as answer by Alan Zhu Friday, May 27, 2011 2:01 AM
    • Marked as answer by Alan Zhu Friday, June 3, 2011 2:33 AM
    Thursday, May 26, 2011 9:07 AM

All replies