How to fix error error-ds-dra-access-denied in Windows 11

Solution Steps

1. 1 Press Windows key + R, type "dssite.msc", and press Enter to open Active Directory Sites and Services. This is where you manage replication topology.
2. 2 Expand the Sites container and find the domain controller that is having replication issues. Right-click the NTDS Settings object under the server and select 'Properties'.
3. 3 Go to the 'Security' tab. Ensure the domain controller's computer account has the 'Replicating Directory Changes' and 'Replicating Directory Changes All' permissions. If not, click 'Add' and add the computer account with those permissions.
4. 4 Alternatively, use the repadmin tool to check replication status. Open Command Prompt as administrator and type "repadmin /showrepl" to see replication status. Look for errors like 'access denied'.
5. 5 If the error is due to a specific domain controller, you can force replication using "repadmin /syncall /AdeP" to synchronize all domain controllers.
6. 6 Check the event logs on both domain controllers for detailed error messages. Use Event Viewer (eventvwr.msc) and look under Directory Service logs.
7. 7 If the issue persists, you may need to reset the computer account of the domain controller. This is advanced and should be done carefully. Use "netdom resetpwd /server: /userd:\ /passwordd:*" (replace with actual values).