Endpoint Encryption

I have upgraded to 7.0.7 and have noticed that AD has not replicated.  I cannot guarantee 100% that it was syncing before and as the upgrade was due to a GPO issue not applying (That could have been attrbuted to AD replication) and so may have been the case before.

Can anyone just confirm that the account details used to replicate with ad, should this be a forest level account or a domain account?

It only needs read access to AD so just a standard domain user for the domain you need to sync. We use an account in the child domain rather than the forest if that helps.

It justs uses LDAP and GPO settings - its not really synchronising per sa

I beleive it is the server synchronising, the client doesn't

But does your your Directory Sync Service Status show it is updating?

It shows it as running yes. There are ways of clearing the tables etc in the SEE replication/sync area but you might want to contact support first.

We did seem to get it updating in the end.  The issue seemed to be using a netbios name isntead of an AD name.

It doesn;t seem to be the most reliable part of the system, at least from a reporting what the status is point of view.