Directory Replication service

We set up a user account for replication per MS instructions, including giving it logon as a service access. When adding the account to startup parameters for dir. repl. service, it displays a message saying “Cannot adjust logon rights and group membership of . Startup parameters for Dir. Repl. Service may be in an inconsistent state. Error 0087 occurred. Parameter is incorrect.”

Have recreated account several times and ensured that SAM replication completed. Any clues?