Basically I created a server farm with a DC that has Active Directory running. From what I understand it's not the best idea to have SharePoint running on a DC, so I have installed SharePoint on a separate server that I have linked to the domain of the DC via My Computer>(Computer Name, Domain, and Workgroup settings section) : Change Settings>(System Properties window)Click the Domain Radial button, type Domain Name... as opposed to using DCpromo and promoting it to a Domain Controller. After tinkering a bit I came to realize that although the AD role was installed on the SharePoint server, AD was not synced, and the computer is using the "local user and groups" in Administrative Tools> computer management. Here is where my question branches off into 3 different questions: 1. Is there a way to sync this SHarePoint server to AD without using DCpromo/promoting it to a DC (probably more of a windows/AD question). 2. What is Active Directory Account Creation mode, and when should I use it? I posted on another Microsoft forum about my problem and someone suggesting using this. The Problem is, when I run SharePoint products and technology wizard, and I get to the "Completing Products and Technologies Configuration Wizard" page, the "Advanced settings" button that should allow me to set up ADAC is greyed out. I'm not sure if this is what I should be using anyway, but I thought I'd ask about it. (link they suggested: http://builddocs.com/content_management/windows-sharepoint-services-wss-server-farm-installation/) 3. This might be a no-brainer (I'm pretty sure I know the answer but I thought I'd ask anyway), but I know you can do an AD profile import in SSP. Correct me if I'm wrong, but AD needs to be set up properly on the server in order for it to do the profile import, and this is not a situation where I can somehow add the profiles in SSP through the domain despite AD not being synced, correct?

You are correct, it's not recommended, installing on an AD Server... Are you may be looking at install instructions for WSS 2.0 and 3.0? 1. Is the reason to move your data, users and in a nut shell move SP to another server off of AD? 2. ADAC allows SharePoint to automate processes of AD object creation in an Org Unit with the correct permissions. 3. The SSP Can be setup to import the full domain but you'll get every user and service account... It's a pain to fix as well. http://technet.microsoft.com/en-us/library/cc263382.aspx http://blogs.msdn.com/gyorgyh/archive/2009/02/07/how-does-it-work-moss-2007-user-profile-import.aspx Kris Wagner, MCITP, MCTS Twitter @sharepointkris Blog: http://www.sharepointkris.com/blog