Paxton, Darren wrote:
The other question though, regarding one-way from AD to FDS - anyone
got any thoughts on that?
The sync code wasn't designed to allow this. However
there are a couple of things you could consider :
1. configure FDS access control to disallow modifications
on attributes that are sync'ed to AD. If there are no
pretinent modifications then nothing will get sync'ed to AD.
2. Hack the code to turn off the FDS->AD (outbound)
change propagation.