The User Profile Service Application service account requires Replicate Directory Changes in Active Directory Domain Services on the domain node. The Grant Replicate Directory Changes permission does not enable an account to create, change or delete Active Directory Domain Services object. It enables the account to read Active Directory Domain Services objects and to discover...
