How to import Active directory users to Moss 2007?

I want to make you clear why it is required? Some people have doubts why we import from active directory? Share Point will automatically check the windows authenticate users, when you click on "check names" in any column data type as "people and group".It will not only recognize the user but will give you full information through active directory import. All the required details like – domain, email address, department will update from active directory to Moss site.


So let us start ->
First you have to create a Shared Services Provider if it is not created in your central administration site. Then follow these steps –

1) Login in Central Administration site.

2) You will be able to see SharedServices1 link in left navigation menu under Shared Services Administration. This link name will depend what you have given in ssp name while configuring Shared services provider.

3) After clicking this -> you will be navigated to shared services administration screen for your SSP. You will be able to see all these section shown below. Click on “User Profiles and properties” link under User Profile and My sites section to import user profiles from the directory.

4) On the User Profiles and Properties page click on "Configure profile import".

5) You will find one link "View Import Connection". On click of this link, new page will open. This page will have one button "Create new Connection". Click on this -> Add connection screen will be opened.

You have to fill all these parameters.

a.    Connection string type – Give Active directory.
b.    Domain Name – provide appropriate domain name.
c.    Select "Auto discover domain controller".
d. Port number and time out will come automatically. So do not change that.
e.    Click on "Auto fill root search  base". It will fill the default details in below section automatically.
f.    Change user filter criteria according to your requirement. This is a LDAP query. You will find this on other blogs that how to build the LDAP query.
g.    Check on Sub tree for all levels search.
h.    Under authentication information specify account name which has read permission for active directory. You can choose default account also.

6)    Click on Ok-> You will get one warning message accept that and go ahead.

7)    you will find the previous screen with one new connection created which you can edit and save again.

8)    Go back to "Configure Profile Import" screen and fill the details. Click on full import and increment import. Schedule it according to your requirement.

9)    For current full import -> Click on Start full import in "User Profile and Properties page".

10)    You will be able to see your crawl result on this page only. After getting it completed. Go to view profile. You will be able to see all user profiles which have been imported.

11)    Done:)