Login to dcserver.contoso.com as contoso\administrator.
Create a SharePoint farm admin account named ‘spadmin’.
a. Use Active Directory Users and Groups to create contoso\spadmin the account name should be ‘SharePoint Admin’.
b. Setup a Contoso OU and add user accounts into the OU as required for your own testing.
3. Run Delegation Control wizard to add contoso\spadmin account to “Replication Directory Changes” permissions.
a. Right click domain and click “Delegate Control…”
b. Click Next.
c. Add contoso\spadmin and click Next.
d. Select “Create a custom task to delegate” and then click Next.
e. Click Next.
f. Check the “Replicating Directory Changes” in the Permissions window and then click Next.
g. Click Finish to complete the Delegation of Control Wizard.
4. Add the contoso\spadmin account as a local machine administrator to the SharePoint WFE (sharepoint).