SP2010 User profile Sync - Importing users from a different domain

Question

Hi

For historical reasons we have two domains, one for the developers and one for production users.  We would like to have one SP2010 Intranet which can service both developers and production users.  This means that we need to be able to import users using the user profile synchronisation service app from the production domain into the SP2010 Intranet which is in the development domain.  There is a one way trust in that the development domain trusts the production domain, but not the other way round.  Is this possible ?

If so could the production domain be a Windows 2000 domain and the development domain be a Windows 2008 R2 domain ?

 

Thanks

 

Nigel

Answer 1

No, User Profile Sync requires a two way trust between the domain hosting the SP servers and the domain in which the users are you wish to sync with. There are some hacks to get it semi working with a one way trust, but they are all unsupported, and break functionality that relies on user name resolution.

---

Cheers
Spence
www.harbar.net
Microsoft Certified Master | SharePoint 2010
Microsoft Certified Master | SharePoint 2007

Answer 2

Hi Spence

 

2 questions :-

 

1) Can I sync with a Windows 2000 domain at all ?

2) In MOSS 2007 you only needed a one way trust - is the two way trust so you can update the AD from SP 2010 ?

 

Thanks

 

Nigel

Answer 3

Hi Nigel,

1. No. The Minimum domain level is Windows 2003 SP2

2. Sort of, the two way trust is a requirement of Forefront Identity Manager, which is now used for the sync (even if only doing an import)

---

Cheers
Spence
www.harbar.net
Microsoft Certified Master | SharePoint 2010
Microsoft Certified Master | SharePoint 2007

Answer 4

Thanks Spence