<\/a>I. How to configure SharePoint Active Directory Import<\/h1>\nBefore we begin, we will assume that you have already provisioned the User Profile Service, have created the User Profile service application and have gathered the required information about your environment.<\/p>\n
This section has 4 parts that will help you to configure AD Import:<\/p>\n
\n- Enable Active Directory Import<\/a><\/li>\n<\/ul>\n
![\"Introduction](\"http:\/\/www.boostsolutions.com\/blog\/wp-content\/uploads\/2013\/12\/Introduction-of-SharePoint-Active-Directory-Import_12.png\")
<\/p>\n
\n- Configure Synchronization Connections<\/a><\/li>\n<\/ul>\n
![\"Introduction](\"http:\/\/www.boostsolutions.com\/blog\/wp-content\/uploads\/2013\/12\/Introduction-of-SharePoint-Active-Directory-Import_9.png\")
<\/p>\n
\n- Map AD attributes with User Profile Properties<\/a><\/li>\n<\/ul>\n
![\"Introduction](\"http:\/\/www.boostsolutions.com\/blog\/wp-content\/uploads\/2013\/12\/Introduction-of-SharePoint-Active-Directory-Import_6.png\")
<\/p>\n
\n- Start Synchronization<\/a><\/li>\n<\/ul>\n
![\"Introduction](\"http:\/\/www.boostsolutions.com\/blog\/wp-content\/uploads\/2013\/12\/Introduction-of-SharePoint-Active-Directory-Import_3.jpeg\")
<\/p>\n
<\/a>Enable Active Directory Import<\/span><\/b><\/p>\n\n- Enter SharePoint Central Administration<\/b>. Under the Application Management<\/b> section, click Manage service applications<\/b>.
![\"Introduction](\"http:\/\/www.boostsolutions.com\/blog\/wp-content\/uploads\/2013\/12\/Introduction-of-SharePoint-Active-Directory-Import_7.png\")
<\/li>\n- On the Manage Service Applications page, click <\/span>User Profile Service Application<\/b>.<\/span><\/li>\n
- On the Manage Profile Service page, in the <\/span>Synchronization<\/b> section, click <\/span>Configure Synchronization Settings<\/b>.<\/span><\/li>\n
- On the Configure Synchronization Settings page, in the <\/span>Synchronization Options<\/b> section, select <\/span>Use SharePoint Active Directory Import option<\/b>, and click <\/span>OK<\/b>.<\/span><\/li>\n<\/ol>\n
<\/p>\n
<\/a>Configure Synchronization Connections<\/span><\/b><\/p>\n\n- On the Manage Profile Service page, click Configure Synchronization Connections<\/b>. You will enter the Synchronization Connections<\/b> page.<\/li>\n
- On the Synchronization Connections page, click the Create New Connection<\/b> button.<\/li>\n
- On the Add new synchronization connection<\/b> page, enter the connection name in the Connection Name<\/b> text box.<\/li>\n
- From the Type<\/b> list, select Active Directory Import<\/b>.<\/li>\n
- Complete the Connection Settings section using the following steps:\n
\n- In the <\/span>Fully Qualified Domain Name<\/b> box, enter the Fully Qualified Domain Name of the domain.<\/span><\/li>\n
- In the <\/span>Authentication Provider Type<\/b> box, select the authentication provider type.<\/span><\/li>\n
- If you select <\/span>Forms Authentication<\/b> or <\/span>Trusted Claims Provider Authentication<\/b>, select an Authentication provider from the <\/span>Authentication Provider Instance<\/b> box. The Authentication Provider Instance box lists only the authentication providers that are currently used by a Web application.<\/span><\/li>\n
- In the <\/span>Account name<\/strong> box, enter the synchronization account in the form: DOMAIN\\user_name<\/b>. The synchronization account must have <\/span>Replicate Directory permissions<\/b> or higher in the root OU of Active Directory.<\/span><\/li>\n
- In the <\/span>Password<\/strong> box, enter the password for the synchronization account.<\/li>\n
- In the <\/span>Confirm password<\/strong> box, enter the password for the synchronization account again.<\/span><\/li>\n
- In the <\/span>Port<\/strong> box, enter the connection port.<\/span><\/li>\n
- If a Secure Sockets Layer (SSL) connection is required to connect to the directory service, select <\/span>Use SSL-secured connection<\/strong>.<\/span><\/li>\n
- If you want to filter objects to be imported from the directory service, in the <\/span>Filter in LDAP syntax for Active Directory Import<\/b> box, enter a standard LDAP query expression to define the filter.
![\"Introduction](\"http:\/\/www.boostsolutions.com\/blog\/wp-content\/uploads\/2013\/12\/Introduction-of-SharePoint-Active-Directory-Import_5.png\")
<\/span><\/li>\n<\/ol>\n<\/li>\n- In the Containers<\/b> section, click Populate Containers<\/b> and then select the containers from the directory service which you want to synchronize. All OUs selected will be synchronized along with their child OUs.<\/li>\n
- Click OK<\/b> and a newly created connection will be listed on the Synchronization Connections<\/b> page.<\/li>\n<\/ol>\n
<\/a>Map AD attributes with User Profile Properties<\/span><\/b><\/p>\n\n- On the SharePoint Central Administration website, in the Application Management<\/b> section, click Manage service applications<\/b>.<\/li>\n
- On the Manage Service Applications page, click User Profile Service Application<\/b>.<\/li>\n
- On the Manage Profile Service page, in the People<\/b> section, click Manage User Properties<\/b>.<\/li>\n
- On the Manage user Properties page, right-click the name of the property that you want to map a directory service attribute to, and then click Edit<\/b>.<\/li>\n
- To remove an existing mapping, in the Property Mapping for Synchronization<\/b> section, select the mapping that you want to remove, and then click Remove<\/b>.<\/li>\n
- To add a new mapping:\n
\n- In the Add New Mapping<\/b> section, in the Source Data Connection<\/b> list, select the data connection that represents the directory service to which you want to map the user profile property to.<\/li>\n
- In the Attribute<\/b> box, enter the name of the directory service attribute to which you want to map the property.<\/li>\n
- Click Add<\/b>.<\/li>\n<\/ol>\n<\/li>\n
- Click OK<\/b>.<\/li>\n
- Repeat steps 4 through 7 to map additional properties.<\/li>\n<\/ol>\n
<\/a>Start Synchronization<\/span><\/b><\/p>\n\n- On the SharePoint Central Administration website, in the Application management <\/b>section, click Manage service applications<\/b>.<\/li>\n
- On the Manage Service Applications page, click User Profile Service Application<\/b>.<\/li>\n
- On the Manage Profile Service page, in the Synchronization<\/b> section, click Start Profile Synchronization<\/b>.<\/li>\n
- On the Start Profile Synchronization page, select Start Full Synchronization<\/b> if this is the first time that you are synchronizing or if you have added or modified any synchronization connections since the last time that you synchronized. Select Start Incremental Synchronization<\/b> to synchronize only information that has changed since the last time that you synchronized.<\/li>\n
- Click OK<\/b>. The Manage Profile Service page will be displayed showing the profile synchronization status in the right pane.<\/li>\n<\/ol>\n
<\/a>II. Key limitations of SharePoint Active Directory Import<\/h1>\nAlthough this feature can import AD profiles from Active Directory to SharePoint, there are some limitations:<\/p>\n
\n- It is very complicated to configure the synchronization and it always gets stuck when starting.<\/span><\/li>\n
- This feature can only import information to User Profile Application, but cannot import to other lists, such as Contact list.<\/span><\/li>\n
- You cannot update your active directory with changes made in SharePoint; there is no “write back” function it only imports.<\/span><\/li>\n
- After starting the synchronization, you have no idea if the synchronization is successful and you don’t know what problems, if any, occurred during synchronization.<\/span><\/li>\n
- This feature is only supported on SharePoint Server 2013, not on SharePoint Foundation 2013.<\/span><\/li>\n<\/ul>\n
<\/p>\n
<\/a>III. About AD Information Sync<\/h1>\nAD Information Sync is a flexible and powerful tool which syncs information between Active Directory and SharePoint. It supports many AD attributes from User, Contact and Computer objects. AD Information Sync overcomes many of the limitations found in SharePoint Active Directory Import.<\/p>\n
\n- With <\/span>AD Information Sync<\/a>, you can create and configure a sync profile in one place with a simple user interface. It also helps you to get rid of the “stuck when starting” problem.
![\"Introduction](\"http:\/\/www.boostsolutions.com\/blog\/wp-content\/uploads\/2013\/12\/Introduction-of-SharePoint-Active-Directory-Import_2.png\")
<\/span><\/li>\n- AD Information Sync<\/a> allows you to import Users Profiles from Active Directory to any SharePoint list. You can view and manage user profiles in SharePoint list.
![\"Introduction](\"http:\/\/www.boostsolutions.com\/blog\/wp-content\/uploads\/2013\/12\/Introduction-of-SharePoint-Active-Directory-Import_1.png\")
<\/span><\/li>\n- AD Information Sync<\/a> provides you with a powerful attributes mapping function; you can configure attribute mappings in one page quickly and easily.
![\"Introduction](\"http:\/\/www.boostsolutions.com\/blog\/wp-content\/uploads\/2013\/12\/Introduction-of-SharePoint-Active-Directory-Import_10.png\")
<\/span><\/li>\n- With <\/span>AD Information Sync<\/a>, any modifications made in SharePoint list can be written back to Active Directory. This is easily done with one click; all you need to do is select the option.
![\"Introduction](\"http:\/\/www.boostsolutions.com\/blog\/wp-content\/uploads\/2013\/12\/Introduction-of-SharePoint-Active-Directory-Import_11.png\")
<\/span><\/li>\n- With <\/span>AD Information Sync<\/a>, you can monitor sync activities by viewing the logs. Logs will quickly let you know what has happened during synchronization.
![\"Introduction](\"http:\/\/www.boostsolutions.com\/blog\/wp-content\/uploads\/2013\/12\/Introduction-of-SharePoint-Active-Directory-Import_8.png\")
<\/span><\/li>\n<\/ul>\n <\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
SharePoint Active Directory Import (AD Import) is one of the new features in SharePoint 2013. It enables you to import user information from Active Directory into SharePoint User Profile Application. This article will introduce how to configure SharePoint Active Directory Import in Central Administration, what the limitations of this feature are and how AD Information […]<\/p>\n","protected":false},"author":41,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1,460,347],"tags":[],"_links":{"self":[{"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/6409"}],"collection":[{"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/comments?post=6409"}],"version-history":[{"count":19,"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/6409\/revisions"}],"predecessor-version":[{"id":9159,"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/6409\/revisions\/9159"}],"wp:attachment":[{"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/media?parent=6409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/categories?post=6409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/tags?post=6409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
<\/p>\n
- \n
- Configure Synchronization Connections<\/a><\/li>\n<\/ul>\n<\/p>\n
- \n
- Map AD attributes with User Profile Properties<\/a><\/li>\n<\/ul>\n<\/p>\n
- \n
- Start Synchronization<\/a><\/li>\n<\/ul>\n<\/p>\n
<\/a>Enable Active Directory Import<\/span><\/b><\/p>\n
- \n
- Enter SharePoint Central Administration<\/b>. Under the Application Management<\/b> section, click Manage service applications<\/b>.<\/li>\n
- On the Manage Service Applications page, click <\/span>User Profile Service Application<\/b>.<\/span><\/li>\n
- On the Manage Profile Service page, in the <\/span>Synchronization<\/b> section, click <\/span>Configure Synchronization Settings<\/b>.<\/span><\/li>\n
- On the Configure Synchronization Settings page, in the <\/span>Synchronization Options<\/b> section, select <\/span>Use SharePoint Active Directory Import option<\/b>, and click <\/span>OK<\/b>.<\/span><\/li>\n<\/ol>\n
<\/p>\n
<\/a>Configure Synchronization Connections<\/span><\/b><\/p>\n
- \n
- On the Manage Profile Service page, click Configure Synchronization Connections<\/b>. You will enter the Synchronization Connections<\/b> page.<\/li>\n
- On the Synchronization Connections page, click the Create New Connection<\/b> button.<\/li>\n
- On the Add new synchronization connection<\/b> page, enter the connection name in the Connection Name<\/b> text box.<\/li>\n
- From the Type<\/b> list, select Active Directory Import<\/b>.<\/li>\n
- Complete the Connection Settings section using the following steps:\n
- \n
- In the <\/span>Fully Qualified Domain Name<\/b> box, enter the Fully Qualified Domain Name of the domain.<\/span><\/li>\n
- In the <\/span>Authentication Provider Type<\/b> box, select the authentication provider type.<\/span><\/li>\n
- If you select <\/span>Forms Authentication<\/b> or <\/span>Trusted Claims Provider Authentication<\/b>, select an Authentication provider from the <\/span>Authentication Provider Instance<\/b> box. The Authentication Provider Instance box lists only the authentication providers that are currently used by a Web application.<\/span><\/li>\n
- In the <\/span>Account name<\/strong> box, enter the synchronization account in the form: DOMAIN\\user_name<\/b>. The synchronization account must have <\/span>Replicate Directory permissions<\/b> or higher in the root OU of Active Directory.<\/span><\/li>\n
- In the <\/span>Password<\/strong> box, enter the password for the synchronization account.<\/li>\n
- In the <\/span>Confirm password<\/strong> box, enter the password for the synchronization account again.<\/span><\/li>\n
- In the <\/span>Port<\/strong> box, enter the connection port.<\/span><\/li>\n
- If a Secure Sockets Layer (SSL) connection is required to connect to the directory service, select <\/span>Use SSL-secured connection<\/strong>.<\/span><\/li>\n
- If you want to filter objects to be imported from the directory service, in the <\/span>Filter in LDAP syntax for Active Directory Import<\/b> box, enter a standard LDAP query expression to define the filter.
<\/span><\/li>\n<\/ol>\n<\/li>\n- In the Containers<\/b> section, click Populate Containers<\/b> and then select the containers from the directory service which you want to synchronize. All OUs selected will be synchronized along with their child OUs.<\/li>\n
- Click OK<\/b> and a newly created connection will be listed on the Synchronization Connections<\/b> page.<\/li>\n<\/ol>\n
<\/a>Map AD attributes with User Profile Properties<\/span><\/b><\/p>\n
- \n
- On the SharePoint Central Administration website, in the Application Management<\/b> section, click Manage service applications<\/b>.<\/li>\n
- On the Manage Service Applications page, click User Profile Service Application<\/b>.<\/li>\n
- On the Manage Profile Service page, in the People<\/b> section, click Manage User Properties<\/b>.<\/li>\n
- On the Manage user Properties page, right-click the name of the property that you want to map a directory service attribute to, and then click Edit<\/b>.<\/li>\n
- To remove an existing mapping, in the Property Mapping for Synchronization<\/b> section, select the mapping that you want to remove, and then click Remove<\/b>.<\/li>\n
- To add a new mapping:\n
- \n
- In the Add New Mapping<\/b> section, in the Source Data Connection<\/b> list, select the data connection that represents the directory service to which you want to map the user profile property to.<\/li>\n
- In the Attribute<\/b> box, enter the name of the directory service attribute to which you want to map the property.<\/li>\n
- Click Add<\/b>.<\/li>\n<\/ol>\n<\/li>\n
- Click OK<\/b>.<\/li>\n
- Repeat steps 4 through 7 to map additional properties.<\/li>\n<\/ol>\n
<\/a>Start Synchronization<\/span><\/b><\/p>\n
- \n
- On the SharePoint Central Administration website, in the Application management <\/b>section, click Manage service applications<\/b>.<\/li>\n
- On the Manage Service Applications page, click User Profile Service Application<\/b>.<\/li>\n
- On the Manage Profile Service page, in the Synchronization<\/b> section, click Start Profile Synchronization<\/b>.<\/li>\n
- On the Start Profile Synchronization page, select Start Full Synchronization<\/b> if this is the first time that you are synchronizing or if you have added or modified any synchronization connections since the last time that you synchronized. Select Start Incremental Synchronization<\/b> to synchronize only information that has changed since the last time that you synchronized.<\/li>\n
- Click OK<\/b>. The Manage Profile Service page will be displayed showing the profile synchronization status in the right pane.<\/li>\n<\/ol>\n
<\/a>II. Key limitations of SharePoint Active Directory Import<\/h1>\n
Although this feature can import AD profiles from Active Directory to SharePoint, there are some limitations:<\/p>\n
- \n
- It is very complicated to configure the synchronization and it always gets stuck when starting.<\/span><\/li>\n
- This feature can only import information to User Profile Application, but cannot import to other lists, such as Contact list.<\/span><\/li>\n
- You cannot update your active directory with changes made in SharePoint; there is no “write back” function it only imports.<\/span><\/li>\n
- After starting the synchronization, you have no idea if the synchronization is successful and you don’t know what problems, if any, occurred during synchronization.<\/span><\/li>\n
- This feature is only supported on SharePoint Server 2013, not on SharePoint Foundation 2013.<\/span><\/li>\n<\/ul>\n
<\/p>\n
<\/a>III. About AD Information Sync<\/h1>\n
AD Information Sync is a flexible and powerful tool which syncs information between Active Directory and SharePoint. It supports many AD attributes from User, Contact and Computer objects. AD Information Sync overcomes many of the limitations found in SharePoint Active Directory Import.<\/p>\n
- \n
- With <\/span>AD Information Sync<\/a>, you can create and configure a sync profile in one place with a simple user interface. It also helps you to get rid of the “stuck when starting” problem.<\/span><\/li>\n
- AD Information Sync<\/a> allows you to import Users Profiles from Active Directory to any SharePoint list. You can view and manage user profiles in SharePoint list.
<\/span><\/li>\n- AD Information Sync<\/a> provides you with a powerful attributes mapping function; you can configure attribute mappings in one page quickly and easily.
<\/span><\/li>\n- With <\/span>AD Information Sync<\/a>, any modifications made in SharePoint list can be written back to Active Directory. This is easily done with one click; all you need to do is select the option.
<\/span><\/li>\n- With <\/span>AD Information Sync<\/a>, you can monitor sync activities by viewing the logs. Logs will quickly let you know what has happened during synchronization.
<\/span><\/li>\n<\/ul>\n<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
SharePoint Active Directory Import (AD Import) is one of the new features in SharePoint 2013. It enables you to import user information from Active Directory into SharePoint User Profile Application. This article will introduce how to configure SharePoint Active Directory Import in Central Administration, what the limitations of this feature are and how AD Information […]<\/p>\n","protected":false},"author":41,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1,460,347],"tags":[],"_links":{"self":[{"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/6409"}],"collection":[{"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/comments?post=6409"}],"version-history":[{"count":19,"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/6409\/revisions"}],"predecessor-version":[{"id":9159,"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/6409\/revisions\/9159"}],"wp:attachment":[{"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/media?parent=6409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/categories?post=6409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.boostsolutions.com\/blog\/wp-json\/wp\/v2\/tags?post=6409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- AD Information Sync<\/a> allows you to import Users Profiles from Active Directory to any SharePoint list. You can view and manage user profiles in SharePoint list.
- This feature can only import information to User Profile Application, but cannot import to other lists, such as Contact list.<\/span><\/li>\n
- On the Manage Service Applications page, click User Profile Service Application<\/b>.<\/li>\n
- In the Attribute<\/b> box, enter the name of the directory service attribute to which you want to map the property.<\/li>\n
- On the Manage Service Applications page, click User Profile Service Application<\/b>.<\/li>\n
- In the <\/span>Authentication Provider Type<\/b> box, select the authentication provider type.<\/span><\/li>\n
- On the Synchronization Connections page, click the Create New Connection<\/b> button.<\/li>\n
- On the Manage Service Applications page, click <\/span>User Profile Service Application<\/b>.<\/span><\/li>\n
- Enter SharePoint Central Administration<\/b>. Under the Application Management<\/b> section, click Manage service applications<\/b>.
- Start Synchronization<\/a><\/li>\n<\/ul>\n
- Map AD attributes with User Profile Properties<\/a><\/li>\n<\/ul>\n