User profile service application(SharePoint 2010)

Following things should be keep in mind for SharePoint admins, while working or creating new User profile service application: 1) The user profile service application should have "Directory Replication Changes" permission at AD and Network Service should have Read access to the %programfiles%\Microsoft Office Servers\14.0 folder at app server. "Directory Replication Changes" will replicate the user profiles from AD to SharePoint not vice versa. 2) The forefront running in service console should run with the same service account. 3) There should be three DB for user profile service application they are ProfileDB, SocialDB, SyncDB 4) The user profile service account should have DBO permission at all the above DBs. 5) The user profile service and sync service should be started through Central admin-app server. 6) The user profile service account should be mentioned in synhronization service in central amdin. 7) For newly created app, please start the full sync and for the older one we can go for the incremental sync. ** Full sync will start it from scrach about all user profiles from AD to SharePoint, hence beaware while doing and should be used at the last option.