| Previous | Next |
| ERROR_DS_DRA_NO_REPLICA | ERROR_DS_DRA_NOT_SUPPORTED |
ERROR_DS_DRA_ACCESS_DENIED
ERROR_DS_DRA_ACCESS_DENIED (8453) is an Active Directory replication error. The target accepted the replication path far enough to evaluate authorization, then denied the replication request. This is different from a network outage and should be investigated as a security, identity, or permissions issue.
What to check
- Verify the source and destination DC machine accounts, secure channels, and the replication permissions on the affected naming context.
- Check that the failing partner is represented by the expected NTDS Settings and server objects in the configuration partition.
- Capture the full
repadmin /showreploutput before changing ACLs; broad permission grants can hide the root cause and weaken directory security.
Useful command
repadmin /showrepl <DestinationDC> /all /verbose
Microsoft: Troubleshoot AD replication error 8453 · Microsoft: Repadmin /showrepl · Microsoft: Diagnose AD replication failures
Looking for a different code? Search another status or error code.