"Set permissions for the Replication Monitoring Run As account on the Domain partition in each domain in the forest.
To do this, follow these steps on a domain controller in the domain:
a. Click Start, click Run, type Adsiedit.msc, and then click OK.
b. In the task pane, right-click ADSI Edit, and then click Connect to.
c. Under Connection Point, click Select or type a Distinguished Name or Naming Context, type the following, and then click OK:
DC=Domain,DC=Domain_extension
d. In the task pane, locate and right-click
CN=MOMLatencyMonitors,DC=Domain,
DC=Domain_extension and then click Properties.
e. In the Permissions tab, click Add.
f. In the Enter the object name to select box, type the name of the replication monitoring Run As account, and then click Check Names to verify the name.
g. Click OK. The Permissions Entry for OpsMgrLatencyMonitors dialog box appears.
h. In the Apply onto drop-down list, click This object and all child objects.
i. Click to select the Allow check box for the Read, Write, Create All Child Objects permission, and then click OK.
j. In the Advanced Security Settings for OpsMgrLatencyMonitors dialog box, click Apply, and then click OK.
k. Close the ADSI Edit window.
2. Set permissions for the Replication Monitoring Run As account on the DomainDNSZones application partition in each domain in the forest. To do this, follow these steps on a domain controller in the domain:
a. Click Start, click Run, type Adsiedit.msc, and then click OK.
b. In the task pane, right-click ADSI Edit, and then click Connect to.
c. Under Connection Point, click Select or type a Distinguished Name or Naming Context, type the following, and then click OK:
DC=DomainDNSZones,DC=Domain,DC=Domain_extension
d. In the task pane, locate and right-click
CN=OpsMgrLatencyMonitors,DC=DomainDNSZones,DC=Domain,
DC=Domain_extension and then click Properties.
e. In the Permissions tab, click Add.
f. In the Enter the object name to select box, type the name of the replication monitoring Run As account, and then click Check Names to verify the name.
g. Click OK. The Permissions Entry for OpsMgrLatencyMonitors dialog box appears.
h. In the Apply onto drop-down list, click This object and all child objects.
i. Click to select the Allow check box for the Read, Write, Create All Child Objects permission, and then click OK.
j. In the Advanced Security Settings for OpsMgrLatencyMonitors dialog box, click Apply, and then click OK.
k. Close the ADSI Edit window.
3. Set permissions for the Replication Monitoring Run As account on the ForestDNSZones application partition.
To do this, follow these steps on a domain controller in the domain:
a. Click Start, click Run, type Adsiedit.msc, and then click OK.
b. In the task pane, right-click ADSI Edit, and then click Connect to.
c. Under Connection Point, click Select or type a Distinguished Name or Naming Context, type the following, and then click OK:
DC=ForestDNSZones,DC=Domain,DC=Domain_extension
d. In the task pane, locate and right-click
CN=OpsMgrLatencyMonitors,DC=ForestDNSZones,DC=Domain,
DC=Domain_extension and then click Properties.
e. In the Permissions tab, click Add.
f. In the Enter the object name to select box, type the name of the replication monitoring Run As account, and then click Check Names
to verify the name.
g. Click OK. The Permissions Entry for OpsMgrLatencyMonitors dialog box appears.
h. In the Apply onto drop-down list, click This object and all child objects.
i. Click to select the Allow check box for the Read, Write, Create All Child Objects permission, and then click OK.
j. In the Advanced Security Settings for OpsMgrLatencyMonitors dialog box, click Apply, and then click OK.
k. Close the ADSI Edit window."
