By default this permission will allow the service to import the profile information from the AD but not to synchronise changes back to the AD. The TechNet article on configuring profile synchronization<http://technet.microsoft.com/en-us/library/ee721049.aspx>puts it this way...
"Authenticated users who have *Replicate Directory Changes* permissions will be granted read-access to AD DS objects. Additional permissions can be granted using access control lists (ACLs) in AD DS. SharePoint Server 2010 will not write profile data back to AD DS unless *Write* permission is explicitly set on the account that has *Replicate Directory Changes*permissions." So, hopefully, this will keep your domain admins from being too unhappy :-) Kirk. On 3 June 2010 12:30, Nigel Hertz <[email protected]> wrote: > Hey all > > > > I’m trying to set up the user profile stuff in 2010. I’m going through these > instructions <http://www.harbar.net/articles/sp2010ups.aspx>, and was > wondering – what are the implications of granting the UPS account > “replicating directory changes”? I’ve got a feeling the domain admins aren’t > going to like it very much if I ask for this. > > > > Nigel > > > > > > > > > > *----------------------------------------------------------------* > > *Nigel Hertz* > > * > *Software Developer | Information Technology > Stockland > Level 25 | 133 Castlereagh Street | Sydney NSW 2000 > T: 02 9035 2617 | F: 02 8988 2617 > > > > > ------------------------------ > Stockland Notice: If this communication has been sent to you by mistake, > please delete and notify us. If it has been sent to you by mistake, legal > privilege is not waived or lost and you are not entitled to use it in any > way. Stockland and its subsidiaries reserve the right to monitor e-mail > communication through its networks. > > _______________________________________________ > ozmoss mailing list > [email protected] > http://prdlxvm0001.codify.net/mailman/listinfo/ozmoss > >
_______________________________________________ ozmoss mailing list [email protected] http://prdlxvm0001.codify.net/mailman/listinfo/ozmoss
