Do I need a one-way synchronization or a two-way synchronization when configuring DSA sync job? When do I need a two-way synchronization?
Excerpt from QMM Best Practices:
One-Way vs. Two-Way Directory Synchronization
In most cases, you only need one-way directory synchronization to be established between the source and the target domain and directed from source to target. This is the case, for example, when you migrate objects in groups to the target domain while continuing administration only on the source (make changes only to source objects) during the whole coexistence period. One-way directory synchronization ensures that all changes made to the source objects (such as passwords and group membership) that have been migrated to the target are replicated to the target directory.
However, sometimes two-way directory synchronization is needed. This is the case when two production directories are merged (for example, when two different companies merge), administration is performed on both sides simultaneously, and you want changes made to the objects on either side to be replicated to the other side.
In most scenarios one-way synchronization will suffice.
This is incorrect, only the one-way sync is needed.
There is however, a situation when having a two-way synchronization is absolutely needed.
In this case an agreement can be made to only create new objects in a particular OU in the target domain. Then this target OU with newly create target accounts can be included in target scope and the objects can be synced to source domain. As soon as any OU is selected in target domain the synchronization job automatically becomes a two-way synchronization.
Note: Quest Technical Support does not provide any assistance when creating or configuring the synchronization scope; there is no official recommendation or suggestions; this article is more of an informative character. To approve your plan or decide about the migration strategy please contact your Account Manager at Quest, who can assist with bringing on board Professional Services or consultants.
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center