The service account used for synchronization does not have permissions to update AD Objects. As a result some of the objects ...