How to manually run LDAP Sync (4382324)

When using the LDAP Sync service, it is important to remember there are two types of synchronization operations. Understanding each of these is useful when diagnosing issues or prioritizing how updates are delivered to KACE Cloud from Active Directory. 

1. Full Sync:

   • Checks all users in Active Directory and compares them with KACE Cloud, rebuilding the entire list of users.

   • It is mainly used the first time the LDAP Sync service runs or when it is manually triggered.

2. Incremental Sync:

   • Checks only what changed in Active Directory since the last sync, allowing faster and ligher executions.

   • Every 40 minutes, the LDAP Sync service automatically runs an incremental synchronization.

- These settings are not customizable. 
- LDAP Sync and the other option serve different purposes and are used at different points in the synchronization lifecycle.  
- LDAP Sync is not supported on machines outside the Active Directory domain.  
- Avoid installing LDAP Sync service on domain controllers,  or client machines that are not joined to the Active Directory domain.  

Manually run an incremental sync. 

To run an incremental sync, open the Services panel and restart the KaceCloudLdapClientSvc. Step-by-step example described below. 

1. Open the Windows Start menu.

   • Search for Services.msc

   • Launch Services.msc as an administrator. 

     

      

2. From the list of available services
   • Search for "KACE Cloud LDAP Client Service"
   • Then right-click the service and select the Restart option. 
     

     

     
     A report of the changes will be reflected under https://<tenant>.kacecloud.com/mdm/settings/ldap

Manually run a full sync. 

To do a full sync, it’s necessary to delete the FullScan file. Then open the Services panel and restart the KaceCloudLdapClientSvc. Step-by-step example described below. 

1. On the machine where LDAP Sync is installed, open a file explorer
   • Navigate to 'C:\Users\KCMDMSvc\AppData\Local\Temp'.
   • Locate and delete the file named `{Config.HostName}-{Config.Id}-FullScan`.
     

     

2. Open the Windows Start menu.
   • Search for Services.msc
   • Launch Services.msc as an administrator.
3. From the list of available services 
   • Search for "KACE Cloud LDAP Client Service"
   • Then right-click the service and select the Restart option.
   • A new file will be sync file will be created and a report of the changes will be reflected under https://<tenant>.kacecloud.com/mdm/settings/ldap

For troubleshootin further details, more information is available in the following section in our documentation :https://docs.kacecloud.com/Getting%20Started/r_LDAPtroubleshoot.htm