Connect.Collaborate.SharePoint

SharePoint 2010 User Profile Synchronization

I'm leaving it up to the MVP's to blog about all the cool features in 2010 but will share some tips on ways to do things in a production environment that developers or "as-built" IT people always seem to do through the 20 click UI procedure.
 
One such example is that the account running the User Profile Synchronization service must have "Replicating Directory Changes" permission on the domain, even if you only want to do full imports.
You can do this with the Active Directory Users and Computers UI or with the command line:
dsacls DC=Contoso,DC=Com /G "Contoso\svcProfSync:CA;Replicating Directory Changes"
 
I place commands like in a server prep cmd file which, among other things, creates my service accounts, adds all the roles and features required for SharePoint installation, changes IIS settings etc...
Posted by corp\ianmorr on Friday, 13 Nov 2009 11:25 | 1 Comments

Links to this post

Comments


Saturday, 21 Nov 2009 09:00 by
SharePointAdminWiki.com
I've written up a step by step guide to building a VM including all the mentions of trip wires around User Profiles ;-) http://www.sharepointdevwiki.com/display/spadmin2010/Install+SharePoint+2010+Public+Beta+on+Standalone+Windows+Server+2008

Name

Url

Email

Comments

CAPTCHA Image Validation