Active Directory change detection trigger


AutoSync has built-in support for automatically detecting changes in Active Directory and triggering an import. This trigger type works with both Active Directory Domain Services and Lightweight Directory Services (LDS).


This trigger can only be used on an "Active Directory Domain Services' or 'Active Directory Lightweight Directory Services" management agent type. From the triggers page, select Add trigger... and the AD/LDS change detection trigger will be available from the drop down list. Please note that only a single instance of the AD/LDS trigger can be added.


Base DN

The base DN that you are interested in getting change notifications for

The base DN specified in the MA configuration

Host Name

The Active Directory server to bind to

The hostname as specified in the MA configuration

Object classes

The object classes to receive change notifications from

The object classes specified in the MA configuration


Optional. The credentials to use to bind to the target directory

The identity of the AutoSync service is used if no credentials are specified

Minimum amount of time to wait in between exections

Prevents continuous import loops by only passing through changes in the directory once per specified interval

1 minute

Ignore changes where the last logon timestamp attributes have been modified within the following time period

A change event is raised by the directory when any attribute changes - even if it is something like one of the last logon timestamp attributes. Updates to these attributes can be very frequent, and may trigger a continuous cycle of imports, defeating the purpose of change detection (you might as well have the MA on a continuous import loop). The setting tells AutoSync that if a change comes in, and the object has a last logon timestamp value in the last 5 minutes then ignore the change completely.

5 minutes


The AD Change Listener does not require any permissions over and above a standard user account. Read permissions to the base DN are all that are required.

Last updated