The Active Directory Sync tool [DirSync] can now be installed on an Active Directory Domain Controller (DC). Read more at http://www.bvainc.com/dirsync-domain-controller-now-can/