Managed Endpoint Accounts › Synchronize Users, Accounts, and Roles › Synchronize Endpoint Accounts with Account Templates › Which Attributes are Updated › Strong Synchronization

Strong Synchronization

Strong synchronization ensures that accounts have the exact account attributes that are specified in the account template.

For example, suppose that you add a group to an existing UNIX account template. Originally, the account template made accounts members of the Staff group. Now, you want to make the accounts members of both the Staff and System groups. All accounts that are associated with the account template are considered synchronized when each account is a member of the Staff and System groups (and no other groups). Any account not in the Staff group is added to both groups.

Some other factors to consider include the following situations:

• If the account template uses strong synchronization, any account belonging to groups, other than Staff and System, are removed from those extra groups.
• If the account template uses weak synchronization, the accounts are added to the Staff and System groups. Any account that has additional groups that are defined to it remains a member of these groups.

Note: Synchronize accounts with their templates regularly to ensure that the accounts stay synchronized with their account templates.