AD sync.... What happens ??

[l00pman]

Hi there.. I have some problems with the sync. of the AD into my Project
Server. As far as I can see the sync. acts as a kind of black-box.. and have
no clue what goes on in side it.. does anyone have any in-debth-knowledge
about how the sync. procedure actually works ???

Regards
Lars, Denmark

 

[Paul Conroy]

Is there anything you specifically need to know? The basics are:

The job is initiated either manually or via the sharepoint timer service,
which spawns a job in queue. The worker process in the queue runs under the
security context of the SSP service account. The SSP service account needs
read objects to the AD security group(s) to be sync'd. A Global Catalogue
server must be contactable by the application server processing the job. A
number of user object attributes are read from the AD scy group and updated
in PWA.

There are some options in PWA which can affect how the sync process manages
updating users.

There is a PWA user attribute that can be set to prevent AD sync.
There is a setting for ERP sync which re-activates any inactive user found
in the AD syc group.