You cannot create an AD DS synchronization connection that has multiple domains selected after you install the Cumulative Update in either KB 2459257 or KB 2459258

Symptoms

Consider the following scenario. You install either the Cumulative Update in KB 2459257 or the Cumulative Update in KB 2459258 on a SharePoint 2010 server. Then, you try to create an Active Directory Domain Services (AD DS) synchronization connection that has multiple AD DS domains selected. In this scenario, you receive the following error message:

Workaround

To create an AD DS synchronization connection that has multiple domains selected, follow these steps:

1. Create an AD DS synchronization connection that has only one domain selected.

2. Edit the AD DS synchronization connection that you just created and select the additional domains.

Note The issue only happens when you create an AD DS synchronization connection that has multiple domains selected. Additional domains can be added by editing an existing AD DS synchronization connection. Microsoft plans to address this issue in a future release.

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.