To synchronize changes in Active Directory, the account used by the Identity Manager driver must have the proper rights set up. For information on the necessary rights, see Section 2.4, Creating an Administrative Account.
If you use the default policies, you must also meet the requirements for the Create, Match, and Placement policies. For information on default policy requirements, see Policies.
The attribute dirxml-uACLockout is not synchronized on the Publisher channel.