Thursday, September 13, 2007

One-Way GAL synchronization using IIFP

By default, IIFP is designed to synchronize GAL in both directions. The one-way synchronization (ForestA to ForestB) can be "simply" achieved by modifying the following settings in the Management Agent (MA):

  1. Use a nonexistent SMTP mail suffix**(@test.test) in the ForestB Management Agent. This will filter all users in ForestB domain
  2. Do not run "Export" profile on ForestA Management Agent. This will prevent the Metaverse being exported to ForestA Active Directory

**SMTP mail suffix is not a filer. But if you use a nonexistent email suffix, it can act as a filter :-)


Post a Comment

Popular Posts


Twitter Delicious Facebook Digg Stumbleupon Favorites More