Microsoft Land

First of all Happy New Year to everyone.

I am actually trouble shooting one of the SharePoint 2010 newly setup Service Farm which is causing issues during Replicating the user profile from Active directory.

One simple step that the Administrator of the Farm who installed it forgot was, giving the “Replicate Directory Changes” permission to the user account which is configured as the administrative account for the User Profile Service Application. In order to make the Fore Front Identity Manager properly do it’s job of replicating the content this permission has to be given to the account which is the administrative account that does the replication BETWEEN the active directory and SharePoint.

Login to the Active Directory Server (i am assuming Windows 2008 R2) and perform the following steps to give the permissions.

1) Launch “Active Directory Users and Computers”

2) Right click on the domain which needs to be replicated and click on properties.

3) Click on “Delegate Control”, Add the User Profile administrative account user and click on next.

4) Make sure ”This folder, existing objects in the folder and Creation of new objects in the folder” radio button is selected and click on Next

5) “General” checkbox is checked by default, and from the list of permissions select “Replicating Directory Changes” checkbox and click on next and finish.

This will grant the administrative account to perform the replication of the objects between Active Directory and SharePoint.