Directory Synchronization with different Service Account Permissions than "Enterprise Admin"

Hello,
I would like to ask whether there is a way to install and configure DirSync tool with the account different than Enterprise Admin. Please let me know if there are alternate methods to accomplish that.
Thanks,
NerKO

No.
This screen will not allow you to continue without Enterprise Admin rights.  Understand however, this account is used for 5 seconds, and not saved anywhere once the wizard completes.
Mike Crowley | MVP
My Blog --
Planet Technologies

Similar Messages

  • What is the effect of the service account permissions

    Hi,
    What is the effect of the service account permissions? For example, suppose the service account for SQL Server database engine is SomeDomain\A, and has no permission to execute stored procedure X, and a user with domain account SomeDomain\B does have the
    said permission. Which one will prevail, i.e. can the user execute stored procedure X? If so, what permissions must I give the service account SomeDomain\A?
    I am asking this in the context of planning deployment in the production environment of a data warehouse application.
    Cheers,
    Jerome
    Jerome Smith BI Consultant, MCP

    Hi Jerome,
    Service account for SQL Server Database Engine only have limited permissions. To grant the account permission to execute stored procedure X, please refer to the following
    query:
    USE database;
    GRANT EXECUTE ON OBJECT::dbo.X
    TO SomeDomain\A;
    GO
    Since the user is in the context of planning deployment in the production environment of a data warehouse application, we may need to add some additional permissions. For more details, please refer to the following blog:
    http://blogs.msdn.com/b/data_otaku/archive/2011/06/28/securing-the-data-warehouse.aspx
    Thanks,
    Katherine Xiong
    Katherine Xiong
    TechNet Community Support

  • Asset Intelligence Synchronization Point: Online Service Account is not Provisioned

    Hello,
    We are receiving the error:
    Asset Intelligence Synchronization Point: Online Service Account is not Provisioned.
    The CM server is a Windows 2012, CM 2012 SP1 & CU1, and SQL 2012. And I am not really sure what it maybe, SUP and our old WSUS server (soon to be retired)
    talk to MS with out issue so I pretty sure it is not network related.
    Thank you.
    From the AIUpdateSvc.log:
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:22:54 GMT:Reading persisted settings from registry
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:22:54 GMT:Using proxy: Server=http://proxy.MyDomain.local:8081/, Credentials=default
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:22:54 GMT:Next scheduled sync time: 04/02/2013 00:00:00; Polling Interval:900 seconds
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:37:54 GMT:Reading persisted settings from registry
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:37:54 GMT:Using proxy: Server=http://proxy.MyDomain.local:8081/, Credentials=default
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:37:54 GMT:Sync Now detected
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:37:54 GMT:Next scheduled sync time: 04/02/2013 00:00:00; Polling Interval:900 seconds
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:37:54 GMT:Authentication: Did not find machine certificate in ALM store
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:37:54 GMT:Enrollment Certicate Path is empty, use bootstrap cert
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:37:55 GMT:Created bootstrap cert from byte array
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:37:55 GMT:[Subject]
    CN=e72756d8-8fe6-4bdd-90cb-31470ef06e18
    [Issuer]
    CN=CatalogServiceIssuingCert.manage.microsoft.com
    [Serial Number]
    9CB329404F8ED1B54559ECEED401C966
    [Not Before]
    6/19/2012 3:03:31 PM
    [Not After]
    6/19/2015 3:03:30 PM
    [Thumbprint]
    5059FF937ED6CD2F1FCAA83A79576150C99EF9AB
    Asset Intelligence Catalog Sync Service Warning: 0 : Mon, 01 Apr 2013 12:39:35 GMT:WebException trying to enroll: Status = Timeout
    Asset Intelligence Catalog Sync Service Error: 0 : Mon, 01 Apr 2013 12:39:35 GMT:Retrieve Machine Cert, Error - The operation has timed out
    Asset Intelligence Catalog Sync Service Error: 0 : Mon, 01 Apr 2013 12:39:35 GMT:Exception attempting sync - The operation has timed out
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:39:35 GMT:Exception details:
    Microsoft.AssetIntelligence.CatalogSyncException: The operation has timed out ---> System.Net.WebException: The operation has timed out
    at System.Net.HttpWebRequest.GetResponse()
    at Microsoft.AssetIntelligence.CatalogService.ProcessRedirection(Uri uri)
    at Microsoft.AssetIntelligence.CatalogService.GetWebRequest(Uri uri)
    at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
    at Microsoft.AssetIntelligence.CatalogService.Enroll(String enrollmentRequest)
    at Microsoft.AssetIntelligence.SyncAdapter.Enroll(X509Certificate2 bootstrapCert)
    --- End of inner exception stack trace ---
    at Microsoft.AssetIntelligence.SyncAdapter.Enroll(X509Certificate2 bootstrapCert)
    at Microsoft.AssetIntelligence.CatalogUpdateSvc.RetrieveMachineCert()
    at Microsoft.AssetIntelligence.CatalogUpdateSvc.DoWork()
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:39:35 GMT:1 Data/Status copied to outbox
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:54:35 GMT:Reading persisted settings from registry
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:54:35 GMT:Using proxy: Server=http://proxy.MyDomain.local:8081/, Credentials=default
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:54:35 GMT:Sync Now detected
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:54:35 GMT:Next scheduled sync time: 04/02/2013 00:00:00; Polling Interval:900 seconds
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:54:35 GMT:Authentication: Did not find machine certificate in ALM store
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:54:35 GMT:Enrollment Certicate Path is empty, use bootstrap cert
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:54:35 GMT:Created bootstrap cert from byte array
    Asset Intelligence Catalog Sync Service Information: 0 : Mon, 01 Apr 2013 12:54:35 GMT:[Subject]
    CN=e72756d8-8fe6-4bdd-90cb-31470ef06e18
    [Issuer]
    CN=CatalogServiceIssuingCert.manage.microsoft.com
    [Serial Number]
    9CB329404F8ED1B54559ECEED401C966
    [Not Before]
    6/19/2012 3:03:31 PM
    [Not After]
    6/19/2015 3:03:30 PM
    [Thumbprint]
    5059FF937ED6CD2F1FCAA83A79576150C99EF9AB

    OK, fixed.  We fixed it by whitelisting the primary site server on the proxy.  Gerry Hampson suggested it here... 
    https://social.technet.microsoft.com/Forums/en-US/a8719c37-1c24-47ae-b980-cb7b52aa3fe1/asset-intelligence-synchronization-point-status-online-service-account-is-not-provisioned?forum=configmanagergeneral
    Shane Curtis

  • How to backup multiple iphones with different iCloud accounts but same apple id?

    I would like to back up 3 idevices each with different icloud accounts to itunes. But they use the same apple id so that itune purchases can be installed on each device (2 iphones and 1 ipad).
    All I want to do is create a backup in case the phones need to be restored. I also want to back up before downloading iOS 8.
    The Macbook Pro that I will back up to has one user and one itunes library.
    Is this possible without mixing up address books and contacts etc? Appreciate if some one could direct me to detail step-by-step instructions if they exist or please tell me how I can do this.
    Thanks.

    With Family Sharing they don't need to have the same Apple ID anymore.
    But backups to iTunes are kept separate among multiple devices; Apple ID and iCloud isn't involved at all. Just make sure the devices do not have the same name.

  • How to back up multiple iphones/ipads with different icloud accounts but same apple id

    I would like to back up 3 idevices each with different icloud accounts to itunes. But they use the same apple id so that itune purchases can be installed on each device (2 iphones and 1 ipad).
    All I want to do is create a backup in case the phones need to be restored. I also want to back up before downloading iOS 8.
    The Macbook Pro that I will back up to has one user and one itunes library.
    Is this possible without mixing up address books and contacts etc? Appreciate if some one could direct me to detail step-by-step instructions if they exist or please tell me how I can do this.
    Thanks.

    With Family Sharing they don't need to have the same Apple ID anymore.
    But backups to iTunes are kept separate among multiple devices; Apple ID and iCloud isn't involved at all. Just make sure the devices do not have the same name.

  • Sharing itunes with different user accounts

    I just got Windows Vista. I have the latest version of Itunes. I'm trying to set it up so that my wife and I can share songs with different user accounts in Windows. I followed all the instructions. I moved the iTunes music folder to a public folder. But everytime I log off my account and return, itunes can't find the song files. Any suggestions?

    They can be transferred to another iTunes library but not another iTunes account.
    Just copy them.

  • I deleted the playlists on my iPhone and when I now try to synchronize with my iTunes account to put the music back, nothing happens and I do not get the music back on my iPhone. Anyone who knows why that could be? Grateful for any suggestions!

    I deleted the playlists on my iPhone and when I now try to synchronize with my iTunes account to put the music back, nothing happens and I do not get the music back on my iPhone. Anyone who knows why that could be? Grateful for any suggestions!

    I know it sounds weird, and that is the reason I posted my question.  Because my case is not like all the ones I've found online and it's confusing.  I added a screen capture of my itunes with my old iphone (the one that houses my playlists) connected to it.
    My playlists "ARE"  in my iphone 4s.  They are still there even though they do not show up when I plug in to itunes in my computer. 
    When connecting my phone to itunes on my macbook, the playlists do not appear anywhere in itunes.  I have found my connected iphone icon, I have clicked on the arrow next to it and it does pull up the standard lists that come with the iphone/itunes:  Music, Movies, TV shows, books.  That's it! below that is "Genius" and below "Geniuns" is "PLAYLISTS"  but the only playlist of mine that shows there is one that I created several years back titled "90's music" and that one I created it on my computer, not my phone.  Under "90's music" there are also other standard playlists that itunes automatically adds.
    Does anyone else have this issue or know how to get around this.  I am starting to think that I am going to have to recreate these lists on my computer

  • HT4865 I need help findin my sons iPod n I set up with different iCloud account n never installed find my device n location map is off how do I locate device

    I need help findin my sons iPod n I set up with different iCloud account n never installed find my device n location map is off how do I locate device

    Jenniferp27.jp wrote:
    ...n never installed find my device n location map is off how do I locate device
    Then you cannot locate it electronically.
    What to do if your iOS device is lost or stolen
    http://support.apple.com/kb/HT5668

  • HT5114 can i have the same email address with different itunes accounts my kids are to young to have an email address but love apps

    can i have the same email address with different itunes accounts my kids are to young to have an email address but love apps

    Have a look here...
    http://macmost.com/setting-up-multiple-ios-devices-for-messages-and-facetime.htm l
    And Here  >  Sharing Apps
    http://macmost.com/sharing-ios-apps-with-family.html

  • Is it recommended practice to add SCCM service accounts to the Domain Admins group?

    I am working with an external consultant that is recommending that all of the SCCM service accounts be added to the Domain Admins group.  I am not the SCCM engineer, I am the AD guy, this is the reason I am questioning this methodology.  I have
    read several articles that seem to provide the appropriate configuration options for all of the SCCM accounts so I see no need to allow these accounts to have Domain Admin level access to the environment.  I don't see a reason for ANY of the service accounts
    to have Domain Admin, let alone all of them.  I have referenced several TechNet articles but there does not seem to be definitive guidance around this.  Could anyone assist with settling this?  Thanks in advance.

    No, there's absolutely no reason for the service accounts to be domain admins.
    All of the required service accounts used in a SCCM environment can be given the proper permissions given their purpose.
    Example: Join Domain Account can be given the permissions to join computer objects in the very specific OU in AD, and nothing else.
    Network Access Account only need read access to your distribution points.
    Client Push Account needs local administrative permissions on your clients.
    What i'm trying to say is. None of any of the service accounts needs to be domain admin. Hope that helps.
    Martin Bengtsson | www.imab.dk

  • Help using file sharing with different users accounts on same Macbook

    Hi, I just wanted a little help using the file sharing option. My wife and I had different users accounts on the same MacBook, but when I am trying to share my baby's picture from my documents folder for my wife to have the same picture, I can't find the way to do that; I am not been able to find my pictures on my wife's account. Is there any way that I could share a folder from my account and my wife to have the same files at the same time on her account?
    I mean, something like the smart play list on the itunes?
    Thank you

    You can't do that directly unless you change permissions on your whole Documents folder which is not a good idea. Your wife can see your Documents folder from her account by going to Users/yourusername/Documents. However, this folder has no read privileges for others except yourself by default so she won't be able to open it.
    rather than changing permissions on your Documents folder, you can place the pictures you want to share in Public folder in your home directory or in Users/Shared folder.

  • Active Directory: how to return users account permissions RWDA?

    In SCS 7.x
    I`v been looking throught idoc functions and couldn`t find one to return the users account permissions when they log in with active directory..
    How is this done..
    I`v noticed they added the code in 10g..
    <$userHasAccessToAccount("profile_account", "R")$>
    Thanks.
    Update:: I ended up just writing my own function that called a service returned AD info split the string and matched it against the account to return 1 = R, 2 = W, 4 = D, 8 = A
    R = 1
    RW = 3
    RWD = 7
    RWDA = 15

    In SCS 7.x
    I`v been looking throught idoc functions and couldn`t find one to return the users account permissions when they log in with active directory..
    How is this done..
    I`v noticed they added the code in 10g..
    <$userHasAccessToAccount("profile_account", "R")$>
    Thanks.
    Update:: I ended up just writing my own function that called a service returned AD info split the string and matched it against the account to return 1 = R, 2 = W, 4 = D, 8 = A
    R = 1
    RW = 3
    RWD = 7
    RWDA = 15

  • Can i use 2 ipad's on the same itunes account with different apple accounts?

    Both me and partner have an ipad 4. Though we only have one computer, can we use the same itunes but with different apple acount without any issues? We use some of the same apps, but my partner plays fx Baldus Gate and is worries that save files will be corrupted.

    Each iPad should be linked to its owner's personal, private and nonshared AppleID. In the Mac, each one should have a different login account so each has their own iTunes Library containing your iPad's details. When you use iTunes on the Mac, since each logs in with a different login and corresponding Home directory, iTunes picks up the correct AppleID.

  • Pushing client to machines in different forests with different user accounts

    I'm managing 2 different forests and need to use 2 different accounts to perform the client push installation. I see that I can add more than one account to the client push installation properties. Will the client push installation process try all the configured
    accounts until it succeeds? Or must I constantly move one of the accounts to the top of the list depending on where I'm pushing the client? 
    thanks!

    HI,
    As Paul wrote it will try all the accounts in the list, make sure that you have a working name resolution ijn place that is what normally causes the biggest issues when pushing clients to computers in other forests.
    I always end up using Jason Sandys legendary startup script,
    http://blog.configmgrftw.com/?page_id=349 which is much easier and you don't have to opern firewalls and use service accounts to deploy the client.
    Regards,
    Jörgen
    -- My System Center blog ccmexec.com -- Twitter
    @ccmexec

  • Share music on same mac with different user accounts

    I'll try to make this clear, i have an imac with a large itunes collection. my two kids have accounts on that same mac, and want to be able to listen to what i have in my itunes. i can't see putting three copies of the same music on the same computer. is there a way to let them play what i have in my itunes account while they are logged in to their own account on the same computer?
    imac (5 years old)   Mac OS X (10.4.6)   macbook, G4 I book, I book, Imac
    macbook w/ superdrive, G4 with combo drive, I-book w/o cd burner   Mac OS X (10.4.6)   macbook, G4 I book, I book, Imac

    Jase, you said "Music sharing works across different user accounts, whether they are on the same computer or different computers", but my son will log into his account where he currently has no music. in the window on the left, we can see the other computers in the house that are on line, but there is no sign of the master account (on that same imac). i assume this is because the master account is not logged in, therefore the secondary accounts can't find the master account's music, nor can I from a remote computer ( my macbook, for example). for instance, right now from my macbook i can see my son's itunes list (on the imac) in my "share window" (even though his list is empty). he can also see my macbooks list in his "share window". he cannot see either my list on that imac, or his sisters list on that same imac. all acounts on the imac have sharing turned on, as well as "look for shared music" turned on.
    i guess the focus is on this: can the master user itunes list be made available to other users on that same computer while they are logged in as other users (and the master account is logged off, which it has to be in order for the secondary accounts to be logged in, right?) I can't think of any other way to ask this, so i hope that clarified what we have tried and what we are asking for.

Maybe you are looking for