Verify that all of the subcomponents are installed. Subcomponent installation must be done after the connector is installed. The subcomponents installed depend upon the connectors used as follows:
For Active Directory Connectors, no subcomponents are installed.
For Directory Server Connectors, the Directory Server plug-in must be enabled on the Directory Server being synchronized.
For Windows NT Connectors, the Windows change detector and password filter subcomponents must be installed on the primary domain controller for each Windows NT domain being synchronized. These subcomponents are installed after the Windows NT Connector is installed.
For the Windows NT SAM Change Detector subcomponent to be effective, you must turn on the Windows NT audit log. To turn on the audit log, use the following procedure and then select Policies -> Audit Policies. Select Audit These Events and then both the Success and Failure boxes for User and Group Management.