ODMAD: What UnicodePwd attribute in the template and if it's required? (4379296)

ODMAD: What UnicodePwd attribute in the template and if it's required? Does it affect password sync process?

The unicodePwd in the template is placed for a very specific reason. Active Directory does not allow users' creation if password is not populated. For this purpose, ODMAD is requiring 2 things:
1. template contains a default password, which should be long and complex enough, to satisfy the target AD requirements
2. unicodePwd mapping is applied during the AD user creation only, applying this default password's hash

ODMAD project may or may not have a password sync configured. Thus target AD users' creation process should not be dependent on presence of the password synchronization.

Note: in addition to creating users with the default password, ODMAD is also setting pwdLastSet value to 0, forcing users to change password on first logon. If password sync is configured, then source password will update the target shortly and pwdLastSet will receive a normal timestamp instead of 0.