A new feature was introduced to restrict remote users from accessing a computer's registry unless the administrator of that computer explicitly grants the remote user access by setting the permission on a new registry key. This can prevent directory replication. Solution is to use an account to do directory replication. For background: Q168464

If you can only buy one book. Its in its 7th edition.