A new feature was introduced to restrict remote users from accessing a
computer’s registry unless the administrator of that computer explicitly grants
the remote user access by setting the permission on a new registry key. This can
prevent directory replication. Solution is to use an account to do directory
replication. For background: Q168464
