We have been looking into this situation for quite a while, with no solid answers. We want to allow some of or lab administrators and group policy administrators to replicate AD, but we do not want to make them DomainAdmins. Has anyone run into this before? Has anyone sucessfully figured out what rights a user needs (short of full DomainAdmin status) to replicate AD? I'm sure this is a fairly common request, but our research has pulled up nothing.
Thanks for any help you can give me,
Benton Chase Wink
-------------------------------------------------
Benton Chase Wink, CCNA MCP
McCombs School of Business
LAN Administrator, Network Team
512-471-9938
512-619-9016
