File Not Found and MOSS MA in UserProfile services in SharePoint 2010

SharePoint 2010 service applications – UserProfile Synch service is not synching the profiles from AD. When you check the Event Log and ULS logs its showing.

Goto ControlPanel\Administrative Tools\Services.. and 

Check the TWO Forefront Identity Manager Services are working or not.

Event Log:

The Forefront Identity Manager Service cannot connect to the SQL Database Server.

The SQL Server could not be contacted. The connection failure may be due to a network failure, firewall configuration error, or other connection issue. Additionally, the SQL Server connection information could be configured incorrectly.

Verify that the SQL Server is reachable from the Forefront Identity Manager Service computer. Ensure that SQL Server is running, that the network connection is active, and that the firewall is configured properly. Last, verify the connection information has been configured properly. This configuration is stored in the Windows Registry.

Log File:

0x1AE0 SharePoint Portal Server User Profiles et8j High UserProfileServiceUserStatisticsWebPart:LoadControl failed, Exception: System.IO.FileLoadException: The located assembly's manifest definition does not match the assembly reference. (Exception from HRESULT: 0x80131040) at Microsoft.Office.Server.UserProfiles.UserProfileConfigManager.InitializeIlmClient(String ILMMachineName, Int32 FIMWebClientTimeOut) at Microsoft.Office.Server.UserProfiles.UserProfileConfigManager..ctor(UserProfileApplicationProxy userProfileApplicationProxy, Guid partitionID) at Microsoft.SharePoint.Portal.WebControls.UserProfileServiceStatisticsWebPartBase.LoadControl(Object sender, EventArgs e) 639a4bee-e242-43ab-8815-c3339d4453d1

After further research found that the profile synch account must need a special permission in the 

Active directory , it is documented in our public KB.

Resolution : http://support.microsoft.com/kb/303972

Setting permissions by using the ACL editor

1. Open the Active Directory Users and Computers snap-in

2. On the View menu, click Advanced Features.

3. Right-click the domain object, such as "company.com", and then click Properties.

4. On the Security tab, if the desired user account is not listed, click Add; if the desired user account is listed, proceed to step 7.

5. In the Select Users, Computers, or Groups dialog box, select the desired user account, and then click Add.

6. Click OK to return to the Properties dialog box.

7. Click the desired user account.

8. Click to select the Replicating Directory Changes check box from the list.

9. Click Apply, and then click OK.

10. Close the snap-in.