I have only seen it used by the IT administrator, makes sense as they are the ones that will know the account credentials to set up the synchronization.

Also, now that I think of it, I have never tried to access as any account other than the VSA, it would be easy to test though, I just don't have my lab up right now.

Much appreciated. Are there guidelines as to the recommended AD synchronisation settings? I only have limited visibility of which options I will need to configure via the DA Administrators Guide (as I have yet to install Custodian Manager).

e.g.

5 Do one of the following, depending on whether you want Custodian Manager

to synchronize with some or all of the containers in the nominated domain

or server:

■ To synchronize with all the containers, click Whole Domain/Server and

then optionally choose to synchronize with mail-enabled users or

mail-enabled groups only.

■ To synchronize with selected containers only, click The following

containers and then click Addacontainer to supply the container details.

■ The frequency with which Custodian Manager synchronizes custodian details

with the corresponding Active Directory or Domino LDAP directory accounts.

■ The number of days that Custodian Manager should wait before it marks as

deactivated a custodian for whom no Active Directory or Domino LDAP

directory account is available.

■ Whether to delete the email addresses associated with a custodian before you

synchronize the custodian with the corresponding Active Directory or Domino

LDAP directory account.

I am not sure there has been a best practice guide built around it. 

If anyone in the org could be a custodian you could just synch the whole org, a lot will depend on the company, size of the org, etc...

Not sure if you have seen this:

About Custodian Manager

I have seen that link and the associated ones, thanks. It's just that I don't know all the options I will be presented when I install Custodian Manager, as they are not documented sufficiently in the install guide. Never mind, I will find out soon enough when I install it. Thanks

Ok, sorry, I am wasn't really sure what you were looking for.  It isn't terribly complicated though.  :)

Hi, I installed Custodian Manager and everything went fine.

Question, when I click on "Manage or Create Custodians", everything is quick in the GUI.

When I click "Manage or Create Groups", it is extremely slow (takes a full minute to get to the next page).

I have about the same number of synched users and groups (~22,000). Any idea why the "Manage or Create Groups" is so slow? Any way to speed it up? Thanks