IT tutorials
 
Technology
 

Sharepoint 2013 : Configuring User Profile Synchronization (part 4) - Writing Back to Active Directory

4/23/2014 2:28:04 AM
- Windows 10 Product Activation Keys Free 2019
- How to active Windows 8 without product key
- Malwarebytes Premium 3.7.1 Serial Keys (LifeTime) 2019

Writing Back to Active Directory

One-way synchronization from Active Directory to SharePoint is fine, but better is the ability to allow users to update their profile in SharePoint and update the changes back to Active Directory. Two-way User Profile Synchronization defines true user-profile synchronization as opposed to isolated import, which assumed that Active Directory (or the LDAP server) was the single-point authority for all profile data. The following steps configure Active Directory and SharePoint to allow write back of profile changes to Active Directory.

To allow write back to Active Directory, your DOMAIN\spups sync account requires additional directory permissions—Create Child Objects (for the OU you are writing back into).

  1. Log on to the server hosting your Active Directory.
  2. Run ADSIEdit.msc.
  3. Connect to the default-naming context for the domain.
  4. Navigate down the tree to the OU that you wish to allow write back.
  5. Right click the OU and select Properties.
  6. Click the Security tab.
  7. At this point, you need to add the DOMAIN\spups user and grant Create Child Objects permission and read and write permissions—but wait!
  8. The DOMAIN\spups user already exists in this list because you delegated Directory Replicating Changes permission. If you are tempted to add the additional permissions to this user, do not. This will result in breaking the profile import.
  9. From the dialog shown in Figure 5, click the Add button, to add the user again.

    9781430249412_Fig06-07.jpg

    Figure 5. Organzational unit security

  10. Do not click OK just yet.
  11. Click the Advanced button, and in the dialog that appears, scroll down to the instance of DOMAIN\spups account that has <not inherited>.
  12. Click the Edit button.
  13. Ensure that the Apply To combo box value is This Object and All Descendent Objects.
  14. Click the check box in the Allow column for the permissions: Write All Properties and Create Child Objects.
  15. Click OK several times to get back to the main ADSIEdit.msc window.

At this stage, the profile import connection, which you established in an earlier configuration stage, imports only! If you think about it, this makes sense—could you imagine how upset HR might be if SharePoint were to overwrite its profile data with user changes, without management control?

The following steps configure the User Profile Synchronization Service for more granular control of properties written back to AD:

  1. Return to the User Profile Service Administration page.
  2. Click the Manage User Properties link.
  3. Choose the property, with mapping to AD, to write back.
  4. Make a mental note of the AD property-mapped field.
  5. Click the combo box over the property name and select Edit.
  6. Scroll to the section Property Mapping for Synchronization.
  7. Click the Remove button.
  8. In the Add New Mapping section, select the AD property in the Attribute combo box.
  9. Change the direction to Export.
  10. Click the Add button.
  11. Click the OK button to save changes.

You can now make changes to the data in the profile field you changed previously, and when the synchronization process runs, you should see the changes for the property reflected in Active Directory.

 
Others
 
- Sharepoint 2013 : Configuring User Profile Synchronization (part 3) - Importing User Profiles from Active Directory
- Sharepoint 2013 : Configuring User Profile Synchronization (part 2) - Creating the User Profile Service Application, Starting the Services
- Sharepoint 2013 : Configuring User Profile Synchronization (part 1) - Establishing Managed Accounts
- Sharepoint 2013 : A User’s Profile, The User Profile Infrastructure
- Microsoft Exchange Server 2013 : Email address policies (part 4) - Creating email address policies with custom filters
- Microsoft Exchange Server 2013 : Email address policies (part 3) - Focusing on certain recipients by using filters
- Microsoft Exchange Server 2013 : Email address policies (part 2) - Creating a new email address policy
- Microsoft Exchange Server 2013 : Email address policies (part 1) - Email policy priority
- Using Office applications with SharePoint 2013 : Using SkyDrive Pro with SharePoint, Using Office Web Apps with SharePoint
- Using Office applications with SharePoint 2013 : Using form libraries, Integrating Project with SharePoint
 
 
Top 10
 
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Finding containers and lists in Visio (part 2) - Wireframes,Legends
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Finding containers and lists in Visio (part 1) - Swimlanes
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Formatting and sizing lists
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Adding shapes to lists
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Sizing containers
- Microsoft Access 2010 : Control Properties and Why to Use Them (part 3) - The Other Properties of a Control
- Microsoft Access 2010 : Control Properties and Why to Use Them (part 2) - The Data Properties of a Control
- Microsoft Access 2010 : Control Properties and Why to Use Them (part 1) - The Format Properties of a Control
- Microsoft Access 2010 : Form Properties and Why Should You Use Them - Working with the Properties Window
- Microsoft Visio 2013 : Using the Organization Chart Wizard with new data
programming4us programming4us
 
Popular tags
 
Video Tutorail Microsoft Access Microsoft Excel Microsoft OneNote Microsoft PowerPoint Microsoft Project Microsoft Visio Microsoft Word Active Directory Biztalk Exchange Server Microsoft LynC Server Microsoft Dynamic Sharepoint Sql Server Windows Server 2008 Windows Server 2012 Windows 7 Windows 8 Adobe Indesign Adobe Flash Professional Dreamweaver Adobe Illustrator Adobe After Effects Adobe Photoshop Adobe Fireworks Adobe Flash Catalyst Corel Painter X CorelDRAW X5 CorelDraw 10 QuarkXPress 8 windows Phone 7 windows Phone 8 BlackBerry Android Ipad Iphone iOS