Managing and configuring DirSync Client for Windows

The Retarus DirSync Client for Windows can be managed through the Windows Services Management Console (services.msc). While it is possible to run the client under the LOCAL SYSTEM security context, for enhanced security, it can also be configured to run under the context of a domain user. In this case, the domain user must have the following system privileges:

• Run as a service.

• Add new events to the event log.

• Read/Write permissions to the %ProgramData%\Retarus\DirSync directory (or the custom location specified in the configuration), including the corresponding LOGS or ARCHIVE subdirectories. If the administrator specifies the configuration and log directories individually, the same file permissions must apply to these directories.

• Read permissions on the LDAP directory. You can configure a domain user to query the directory within the service settings.

The client configuration is stored in an XML file located in the same folder as the RetarusDirSync.exe executable. You can edit this file using your favorite text editor. If you need assistance, Retarus can help you configure the file.