This article applies as of PRTG 23


Add the Active Directory Replication Status Errors sensor without Active Directory (AD) admin rights.


How to add the Active Directory Replication Errors sensor without AD admin rights

Follow the below steps:

  1. Open Active Directory Users and Computers.
  2. Go to View | Advanced Features.

    Navigation

  3. Go to the Security tab and select the service account user.
    Note: The user should be a member of DCOM and Performance Monitor group.
  4. Allow Monitor active directory replication to give permission to the user.

    User Permission

  5. Open the wmimgmt.msc on the AD server.
  6. Add the service account in the Root as well as in the Microsoft Active Directory.
  7. Go to WMI Management | Security | Root and allow Enable Account, Remote Enable, and Read Security.

    Root Permissions

  8. Go to Security | MicrosoftActiveDirectory and allow Enable Account, Remote Enable, and Read Security.

    AD Permissions

    Now you can add the Active Directory Replication Errors sensor.

    More

Disclaimer:
The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.