Home » Microsoft » 70-331 » Which Active Directory permission should you assign to the synchronization account?
You have a SharePoint Server 2013 server farm.
Active Directory attributes are imported to user profiles.
You need to ensure that if users change the mobile phone number in their SharePoint user profile, the new information will be copied to their Active Directory user account.
Which Active Directory permission should you assign to the synchronization account?
A. Read All Properties
B. Manage Replication Topology
C. Write All Properties
D. Replicate Directory Changes
Correct Answer: D
Explanation/Reference:
The synchronization account for a connection to Active Directory Domain Services (AD DS) must have the following permissions:
It must have Replicate Directory Changes permission on the domain with which you’ll synchronize.
Note: The Replicate Directory Changes permission enables the synchronization account to read AD DS objects and to discover AD DS objects that have been changed in the domain. The Grant Replicate Directory Changes permission does not enable an account to create, modify or delete AD DS objects.
