Grant Replicate Directory Changes permission on a domain to FIM Synchronization service account
Tuesday, March 11, 2014
SharePoint Workaround – Errors with User Profile Synchronization on SharePoint 2010/2013
Symptoms:
On Services.msc: Forefront
Identity Manager Service service fails to start
---
Event id: 6324 –
FIMSyncronizationService
The server encountered an
unexpected error and stopped.
(The sql connection string has
unsupported values)
---
Event id: 7024 – Service
Control Manager
The Forefront Identity Manager
Synchronization Service service terminated with service-specific error
%%-2146234334.
Workaround:
Grant Replicate Directory Changes permission on a domain to FIM Synchronization service account
Grant Replicate Directory Changes permission on a domain to FIM Synchronization service account
To grant Replicate Directory
Changes permission on a domain
1. On the domain controller,
click Start, click Administrative Tools, and then click Active Directory Users
and Computers.
2. In Active Directory Users and
Computers, right-click the domain, and then click Delegate Control.
3. On the first page of the
Delegation of Control Wizard, click Next.
4. On the Users or Groups page,
click Add.
5. Type the name of the
synchronization account, and then click OK.
6. Click Next.
7. On the Tasks to Delegate page,
select Create a custom task to delegate, and then click Next.
8. On the Active Directory Object
Type page, select This folder, existing objects in this folder, and creation of
new objects in this folder, and then click Next.
9. On the Permissions page, in
the Permissions box, select Replicating Directory Changes (select Replicate
Directory Changes on Windows Server 2003), and then click Next.
10. Click
Finish.
Reference:
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment