For Active Directory domains, you can configure a service connection that will allow you to perform the following operations:
Domain connection check
Synchronization of domain accounts
Domain account password check
Resetting password of domain accounts
Synchronization of security groups of domain accounts
Synchronization of domain computers
Adding accounts
Service operations are performed on behalf of a service account. A domain account can be assigned to the service role. Before setting up a service connection, you must add a domain account to the system.