SYMPTOMS

Replication fails with Event 3216 - System Error 5.

CAUSE

In Windows NT 4.0, a new feature was introduced to restrict remote users from remotely accessing a computer's Registry, unless the administrator of that computer explicitly grants the remote user access by setting the permission on a new registry key. This adversely affects directory replication.

The Administrator program generates a replication account called repluser, and grants membership for that account in the Replicator and Backup Operators groups. These groups then configure the Directory Replicator services on the export and import computers to use this account. When the replication interval occurs, the import computer makes a remote procedure call (RPC), requesting to read the registry of the export server to determine the subdirectories that exist for replication. By default, only the Administrators group has permission to remotely access the Registry. If no other groups or users were specified in the Permission list, the account used for replication is denied access and replication fails.

WORKAROUND

On the export computer, give repluser read access to:

Also refer to KB Article ID:

Q158994 Windows NT 4.0 Fails to Replicate to Backup Domain Controllers