When starting User profile synchronization does SharePoint check if one managed accounts have "Replicate directory changes" permission?

Question

I'm trying to start User Profile synchronization service but I'm stuck on starting.

Does SharePoint check if one of the managed accounts have replicated directory changes permission?

Can user profile synchronization service be started without having a managed account with replicated directory changes?

I know that I need "Replicated directory changes" permission to make it work, but CAN the service be started without one? and then later add the right permission -> add the user to the sync

I've talked to some people I know and they still think that the user have to have replicated user to active the service (to get it "started"). I've read on Harbar http://www.harbar.net/articles/sp2010ups2.aspx

The Synchronization Connection Account must have Replicating Directory Changes on the Domain you are syncing with. It is the only way sync will work. It’s a hard requirement. Despite the scary name the Replicating Directory Changes permission makes zero changes to AD. It provides a change log capability, which improves the speed of operations such as Sync.

Answer 1

When you create a connection (Which is after Synchronization services started)to AD, this is place where you put the Account which required the Replicate Directory Changes.

Yes, User Profile Synchronization Services started without the account which have AD permission. SharePoint does not use the Managed account for the connection.

You should check the ULS logs/ Event Logs, get the clue why it is stuck at starting. Make sure the account under which you are running the UPS should be in Local admin.

Answer 2

"Replicate directory changes" permission is a must for the account using which you are executing user profile sync (the one you specify in synchronization connection settings).