MachSol MachSync is an identity synchronization solution designed to synchronize user identities, passwords, groups, and organizational units across multiple Active Directory environments. The tool supports various deployment scenarios including one-to-one, one-to-many, and many-to-many Active Directory configurations. The solution synchronizes users, passwords, groups, group memberships, organizational units (OUs), nested OUs, and Active Directory attributes across AD domains. It uses LDAP protocol to manage and access directory information services, with communication between MachSync utilities occurring via TCP over predefined or custom ports. MachSync can be installed on Domain Controllers or on servers that are members of the domain. When installed on Domain Controllers, full password synchronization is supported. Installation on member servers enables user and group synchronization but does not support password synchronization. The tool captures password and information updates in real-time and synchronizes them to partner MachSync installations at regular intervals. Password synchronization only applies to password changes made after deployment; existing passwords are not synchronized during initial setup. Security features include dual-layer AES encryption for data protection. Data is encrypted in memory and an additional encryption layer is applied to network packets during transmission. Network encryption uses public/private key combinations that can only be decrypted by the target machine. Administrators can define custom TCP ports for data transmission. The solution provides granular control over synchronization processes, allowing administrators to define rules for user and group synchronization, password policies, and attribute mapping. It supports customizable attribute mappings and transformations for integration with diverse Active Directory environments.