When configuring Directory Synchronization of any Active Directory Objects you are able to select any of the objects under ‘Match target objects by:’ which are: Account name, E-mail, or SIDHistory. You notice the target object will not reflect changes made to the source object. If any of the three options to match on are selected in the ‘Domain Pair Properties’, the AD Object is not synchronized when the corresponding attribute is selected in ‘Attributes To Skip’ under the Specify Advanced Options in the Synchronization Properties.
When selecting/checking ‘Object Matching’ such as ‘SIDHistory’ under “Match target objects by:” and the corresponding attribute to skip such as ‘SIDHistory’ will not be greyed out and will still allow the corresponding skipped attribute to be selected causing the matching and AD synchronization for that object to not occur. This can be observed by using matching by ‘SIDHistory’ and selecting to skip the ‘SIDHistory’ attribute, the AD object synchronization will not occur. This behavior applies when selecting any of the possible objects to match and their corresponding ‘skipped attribute’ are also selected
A possible workaround is to ensure that when selecting any option for matching target objects that the corresponding attributes in the ‘Attributes To Skip’ in the ‘Advanced Options’ of the ‘Synchronization Properties’ are NOT selected when you are synchronizing any Active Directory objects that are to be matched.
