SeSynchAgentPrivilege gives service privilege to synchronize directory service data.
Allows a process to read all objects and properties in the directory, regardless of the protection on the objects and properties. This privilege is required to use Lightweight Directory Access Protocol (LDAP) directory synchronization (Dirsync) services.
Default setting: Not assigned. The privilege is relevant only on domain controllers.