Awesome, thanks for that Kirk.
*Please ensure that you log all issues or requests with the IT Service Centre. When logging calls, please include a detailed description of the problem.* From: [email protected] [mailto:[email protected]] On Behalf Of Kirk Barrett Sent: Thursday, 3 June 2010 1:47 PM To: ozMOSS Subject: Re: Query - User Profile Services By default this permission will allow the service to import the profile information from the AD but not to synchronise changes back to the AD. The TechNet article on configuring profile synchronization<http://technet.microsoft.com/en-us/library/ee721049.aspx> puts it this way... "Authenticated users who have Replicate Directory Changes permissions will be granted read-access to AD DS objects. Additional permissions can be granted using access control lists (ACLs) in AD DS. SharePoint Server 2010 will not write profile data back to AD DS unless Write permission is explicitly set on the account that has Replicate Directory Changes permissions." So, hopefully, this will keep your domain admins from being too unhappy :-) Kirk. On 3 June 2010 12:30, Nigel Hertz <[email protected]<mailto:[email protected]>> wrote: Hey all I'm trying to set up the user profile stuff in 2010. I'm going through these instructions<http://www.harbar.net/articles/sp2010ups.aspx>, and was wondering - what are the implications of granting the UPS account "replicating directory changes"? I've got a feeling the domain admins aren't going to like it very much if I ask for this. Nigel ---------------------------------------------------------------- Nigel Hertz Software Developer | Information Technology Stockland Level 25 | 133 Castlereagh Street | Sydney NSW 2000 T: 02 9035 2617 | F: 02 8988 2617 ________________________________ Stockland Notice: If this communication has been sent to you by mistake, please delete and notify us. If it has been sent to you by mistake, legal privilege is not waived or lost and you are not entitled to use it in any way. Stockland and its subsidiaries reserve the right to monitor e-mail communication through its networks. _______________________________________________ ozmoss mailing list [email protected]<mailto:[email protected]> http://prdlxvm0001.codify.net/mailman/listinfo/ozmoss _____________________________________________________________________________________________________________________________________________________________ Stockland Notice: If this communication has been sent to you by mistake, please delete and notify us. If it has been sent to you by mistake, legal privilege is not waived or lost and you are not entitled to use it in any way. Stockland and its subsidiaries reserve the right to monitor e-mail communication through its networks.
_______________________________________________ ozmoss mailing list [email protected] http://prdlxvm0001.codify.net/mailman/listinfo/ozmoss
