To grant a user administrative rights for a replication group, follow these steps:
1. Grant the user full access to the replication group object and to the child objects of the replication group object.
2. Grant the user full access to the DFS replication objects under each computer object for all computers that are members of the replication group.
DFS replication can replicate data from one computer to another computer. A user who can configure DFS replication on a specific computer is typically the local administrator of that computer. To automatically assign administrative rights for DFS replication groups, a user must be the local administrator for all the member computers in the replication group.
To automatically assign administrative rights for all DFS replication groups in a domain, follow these steps:
1. Add an access control entry on the DFSR-GlobalSettings object for each user or for each group that is an administrator of the replication group. (An access control entry is a permission entry in a discretionary access control list.) This step gives the user full access to all replication group-related objects, but does not let the user create replication groups.
Note The access control entry must give full access to the user and must apply only to child objects.
2. Make each user the local administrator of each computer that is a member of a replication group.