Domain controller {0} must have the "Enable computer and user accounts to be trusted for delegation" user right granted to ...

Domain controller {0} must have the "Enable computer and user accounts to be trusted for delegation" user right granted to the Builtin Administrators security group if domain controller {0} is used as a replication partner during a domain controller promotion.