Registry settings
Below you will find a list of the registry settings used by the components of Specops Password Sync. The settings can be changed using the Registry Editor.
Change Notifier Service
You will need to manually add the Notifier Service folder in the Registry Editor.
- From the Registry Editor, browse to HKLM\Software\Specopssoft\Specops Password Sync.
- Right-click, select New, and click Key.
-
In the New Key field, enter ChangeNotifierService.
Registry key Description HKLM\Software\Specopssoft\Specops Password Sync\ChangeNotifierService\QueuesFolder
The full path to the folder where password synchronization jobs should be queued. Reboot of the DC is required after changing this key.
You will need to manually add this registry setting on all Domain Controllers:-
From the Registry Editor, browse to
HKLM\Software\Specopssoft\Specops Password Sync\ChangeNotifierService
. - Right-click, select New, and click String Value.
- Double-click the new value to edit string.
- In the value name field, enter Queues Folder.
-
In the value data field enter
%SystemRoot%\System32\SpecopsPasswordSync\Queues
. - Click OK.
Registry key Description HKLM\Software\Specopssoft\Specops Password Sync\ChangeNotifierService\ NetworkOperationTimeout
Time in milliseconds between the DC and the Sync Server before operation to Sync Server times out. If there is high latency between DC and Sync Server, this can be increased. However, normally this value shouldn’t be changed.
You will need to manually add this registry setting on all Domain Controllers:
-
From the Registry Editor, browse to
HKLM\Software\Specopssoft\Specops Password Sync\ChangeNotifierService
- Right-click, select New, and click DWORD (32-bit) Value.
- Double-click the new value to edit string.
- In the value name field enter NetworkOperationTimeout.
- In the value data field enter 5000.
- Click OK.
Registry key Description HKLM\Software\Specopssoft\Specops Password Sync\ChangeNotifierService\
IntervalBetweenRefreshConfigFromAD
Interval in milliseconds between looking for configuration changes in Active Directory. You will need to manually add this registry setting on all Domain Controllers:
-
From the Registry Editor, browse to
HKLM\
Software\ Specopssoft\ Specops Password Sync\ ChangeNotifierService - Right-click, select New, and click DWORD (32-bit) Value.
- Double-click the new value to edit string.
- In the value name field enter IntervalBetweenRefreshConfigFromAD.
- In the value data field enter 60000.
- Click OK.
Registry key Description HKLM\ Software\ Specopssoft\ Specops Password Sync\
ChangeNotifierService\ IntervalBetweenPollingSyncPointQueue Interval in milliseconds between polling for new password changes in a Sync Point’s queue folder. You will need to manually add this registry setting on all Domain Controllers.
-
From the Registry Editor, browse to
HKLM\
Software\ Specopssoft\ Specops Password Sync\ ChangeNotifierService - Right-click, select New, and click DWORD (32-bit) Value.
- Double-click the new value to edit string.
- In the value name field enter IntervalBetweenPollingSyncPointQueue.
- In the value data field enter 2500.
- Click OK.
Registry key Description HKLM\ Software\ Specopssoft\ Specops Password Sync\
ChangeNotifierService\ LicenseCheckStartTime The time of day when license check should start. You will need to manually add this registry setting on all Domain Controllers.
-
From the Registry Editor, browse to
HKLM\
Software\ Specopssoft\ Specops Password Sync\ ChangeNotifierService - Right-click, select New, and click String Value.
- Double-click the new value to edit string.
- In the value name field enter LicenseCheckStartTime.
- In the value data field enter 00:00.
- Click OK.
-
From the Registry Editor, browse to
Change Notifier
Before you add the below registry key, you will need to:
-
Browse to
HKLM\
from the Registry Editor.Software\ Specopssoft\ Specops Password Sync - Right-click, select New, and click Key.
- In the New Key field, enter ChangeNotifier.
Registry key | Description |
HKLM\ AllowSyncForAdministrators |
Enabling this setting will allow password synchronization for admin accounts.
You will need to manually add this registry setting on all Domain Controllers:
|
Admin Tools
Registry key | Description |
---|---|
HKLM\ Sync\ |
Clear the log file when the service is started. 0 = Keep log file 1 = Clear log file Default value: 1 |
HKLM\ Sync\ |
Enables and disables debug logging for the Specops Password Sync Admin Tools. |
HKLM\ Sync\ |
Interval in milliseconds between looking for configuration changes in Active Directory. Default value: %LocalAppData%\ |
HKLM\ Sync\ |
Maximum size of a log file before a new log file is created. Only the two latest log files will be kept. Default value: 0x0000000a (10) |
GpSnapIn
Registry key | Description |
---|---|
HKLM\ Sync\ |
Clear the log file when the service is started. 0 = Keep log file 1 = Clear log file Default value: 1 |
HKLM\ Sync\ |
Enables and disables debug logging for the Specops Password Sync Group Policy snap-in. |
HKLM\Specopssoft\Specops Password Sync\GpSnapIn\LogFilePath |
Interval in milliseconds between looking for configuration changes in Active Directory. Default value: %LocalAppData%\ |
HKLM\ Sync\ |
Maximum size of a log file before a new log file is created. Only the two latest log files will be kept. Default value: 0x0000000a (10) |
Specops Password Sync Server Service
Registry key | Description |
---|---|
HKLM\ Sync\ |
Clear the log file when the service is started. 0 = Keep log file 1 = Clear log file Default value: 1 |
HKLM\ Sync\ |
The path to the
Specops Password Sync Server database file.
The default path is handled internally by the service. Default value: Empty |
HKLM\ Sync\ |
Enables and disables debug logging for the Specops Password Sync Server service. |
HKLM\ Sync\ |
Interval in milliseconds between looking for configuration changes in Active Directory. Default value: C:\SPS.SyncServer.log |
HKLM\ Sync\ |
Maximum size of a log file before a new log file is created. Only the two latest log files will be kept. Default value: 0x0000000a (10) |
HKLM\ Sync\ |
Number of seconds between polling the database for new password changes. Setting a low value increases the server load. Setting a high value increases the latency between the user password change and the synchronization to the external system. Default value: 0x00000005 (5) |
HKLM\ Sync\ |
The number of seconds the Sync Server should cache Sync Point data.
Changing this value controls how often the Sync Server has to read Sync Point data from Active Directory. Default value: 0x000001e (30) |