What does Windows error code 8630 (ERROR_DS_DRA_SECRETS_DENIED) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The request to replicate secret attributes was denied.

Previous	Next
ERROR_DS_DRA_CORRUPT_UTD_VECTOR	ERROR_DS_RESERVED_MAPI_ID

ERROR_DS_DRA_SECRETS_DENIED

ERROR_DS_DRA_SECRETS_DENIED (8630) is an Active Directory replication error. The replication request included secret data, but the directory service denied that part of the operation. This is an authorization and replication-scope issue; it should not be worked around by exposing or manually copying secret attributes.

What to check

Identify the source, destination, and type of replication request that attempted to include secrets.
Review domain-controller identity, secure-channel health, and permissions using the least-privilege model.
If the issue involves a read-only domain controller, verify password replication policy and the intended role of that replica.

Useful command

repadmin /showrepl <DestinationDC> /all /verbose

Microsoft: Troubleshoot AD replication error 8453 · Microsoft: RODCs and replication attribute sets · Microsoft: Diagnose AD replication failures

Looking for a different code? Search another status or error code.