SharePoint 2010: FIMSynchronizationService errors when running Profile Synchronization

Today I can't synchronize User Profile in SharePoint 2010 Central Admin. I found out error in windows log (in event viewer) that said such as this :

Log Name: Application
Source: FIMSynchronizationService
Date: 17.2.2010 9:23:03
Event ID: 6050
Task Category: Management Agent Run Profile
Level: Error
Keywords: Classic
User: N/A
Computer: wv002578.eu.tieto.com
Description:
The management agent "MOSSAD-[SYNCHRONIZATION CONNECTION NAME]" failed on run profile "DS_DELTAIMPORT" because of connectivity issues.


Solution:

1. Start FIM SSM (C:\Program Files\Microsoft Office Servers\14.0\Synchronization Service\UIShell\miisclient.exe)
2. Go to Management Agents screen, right click on MOSSAD-[SYNCHRONIZATION CONNECTION NAME], select the item and click on connection status to show error detail

3. Close Properties window
4. Stop User Profile Synchronization Service and start again from Central Admin (Manage services on server on System Settings section)
5. Select the User Profile Name and insert the password

Source for detail : http://blog.jussipalo.com/2010/02/sp2010-fimsynchronizationservice-errors.html

To solve the errror on the screen we must set System Account user have permission to Replicate Directory Changes in AD (Active Directory).
For the profile synchronization to work, our service account which is being used by UPS should have the “Replicate Directory Changes” permission on a domain.

This rights for query changes in the directory. This permission does not allow an account to make any changes in the directory. Refer: http://technet.microsoft.com/en-us/library/hh296982.aspx#RDCdomain


So, Here are the steps to fix:

Open the Active Directory Users and Computers snap-in
1.On the View menu, click Advanced Features.
2.Right-click the domain object, such as “company.com”, and then click Properties.
3.On the Security tab, if the desired user account is not listed, click Add; if the desired user account is listed, proceed to step 7.
4.In the Select Users, Computers, or Groups dialog box, select the desired user account, and then click Add.
5.Click OK to return to the Properties dialog box.
6.Click the desired user account.
7.Click to select the "Replicating Directory Changes" check box from the list.
8.Click Apply, and then click OK.

After that, start UPS full import again, and the issue will get fixed!


More info: http://salaudeen.blogspot.com/2011/10/user-profile-sync-not-importing-ad.html

Thank's God, this save my day ^.^