So this is something I was always asking myself: why is the AD shim AD
parameter "Enable DirSync Incremental Values" disabled and hidden by default?
Documentation has:

"Enable DirSync Incremental Values: The Publisher channel usually receives all
the values of a multi-valued attribute. Enabling this option reports only the
added or deleted values during the poll interval. This requires 2003 Forest
functional mode or above. This option is hidden by default. It can be modified
by selecting the Edit XML option in the Driver configuration tab."

But why? Ist is dangerous (other than it does not work in pre-2003 forests)?
Does it refuse to play nicely with the default packages? Anyone who knows about
nasty bugs or other caveats to avoid enabling it?


--
http://www.is4it.de/en/solution/iden...ss-management/

(If you find this post helpful, please click on the star below.)