SPUserProfileSyncService

Parameters

Parameter	Attribute	DataType	Description	Allowed Values
UserProfileServiceAppName	Key	string	The name of the user profile service for this sync instance
Ensure	Write	string	Present to ensure the service is running, absent to ensure it is not	Present, Absent
FarmAccount	Required	String	The farm account, which is needed to provision the service app
RunOnlyWhenWriteable	Write	Boolean	Should the sync service only run when the user profile database is in a writeable state?
InstallAccount	Write	String	POWERSHELL 4 ONLY: The account to run this resource as, use PsDscRunAsAccount if using PowerShell 5

Description

This resource is responsible for ensuring that the user profile sync service has been provisioned (Ensure = "Present") or is not running (Ensure = "Absent") on the current server. This resource uses the InstallAccount to validate the current state only, the set method which will do the provisioning uses the FarmAccount to do the actual work - this means that CredSSP authentication will need to be permitted to allow a connection to the local server. To allow successful provisioning the farm account must be in the local administrators group, however it is not best practice to leave this account in the Administrators group. Therefore this resource will add the FarmAccount credential to the local administrators group at the beginning of the set method, and then remove it once it has completed its work.

Example

SPUserProfileSyncService UserProfileSyncService
{  
    UserProfileServiceAppName   = "User Profile Service Application"
    Ensure                      = "Present"
    FarmAccount                 = $FarmAccount
    RunOnlyWhenWriteable        = $true
    InstallAccount              = $InstallAccount
}