Active Directory Domain Services was unable to correctly create the default security descriptor for the following application ...

Active Directory Domain Services was unable to correctly create the default security descriptor for the following application directory partition.



Application directory partition: 
%3



User Action

Review the access control list (ACL) on the newly created application directory partition. Ensure the Replication Get Changes All access right is assigned to both the Enterprise Domain Controllers group and the Enterprise Read-only Domain Controllers group, and remove the right from the domain Domain Controllers group.



Additional Data

Error value: 
%1 %2

Active Directory Domain Services successfully transferred the remaining data in directory partition %1 to another Active ... Active Directory Domain Services updated the following object with attribute changes after reversing one or more of the failed ... Active Directory Domain Services was unable to access the security identifier (SID) associated with the Enterprise Domain ... Active Directory Domain Services was unable to allocate sufficient memory to process an incoming request. This error has ... Active Directory Domain Services was unable to correctly create the default security descriptor for the following application ... Active Directory Domain Services was unable to create an object on a remote directory service. directory service (blank = ... Active Directory Domain Services was unable to delete a lingering object on the local domain controller. The object had been ... Active Directory Domain Services was unable to delete the access control entry (ACE) for the domain Domain Controllers security ... Active Directory Domain Services was unable to delete the following lingering object on the local domain controller because ...