What does Windows error code 8453 (ERROR_DS_DRA_ACCESS_DENIED) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: Replication access was denied by Active Directory.

Previous	Next
ERROR_DS_DRA_NO_REPLICA	ERROR_DS_DRA_NOT_SUPPORTED

ERROR_DS_DRA_ACCESS_DENIED

ERROR_DS_DRA_ACCESS_DENIED (8453) is an Active Directory replication error. The target accepted the replication path far enough to evaluate authorization, then denied the replication request. This is different from a network outage and should be investigated as a security, identity, or permissions issue.

What to check

Verify the source and destination DC machine accounts, secure channels, and the replication permissions on the affected naming context.
Check that the failing partner is represented by the expected NTDS Settings and server objects in the configuration partition.
Capture the full repadmin /showrepl output before changing ACLs; broad permission grants can hide the root cause and weaken directory security.

Useful command

repadmin /showrepl <DestinationDC> /all /verbose

Microsoft: Troubleshoot AD replication error 8453 · Microsoft: Repadmin /showrepl · Microsoft: Diagnose AD replication failures

Looking for a different code? Search another status or error code.