Grant Active Directory Domain Services permissions for profile synchronization in SharePoint Server 2013

http://technet.microsoft.com/en-us/library/hh296982.aspx