AD Permission for profile sync

Hello

I am trying to follow the link below to setup a directory and profile import from AD to SharePoint. I am trying to make sure that the instructions included in the link will allow a sync from AD to SharePoint but we definitely DO NOT want any changes going back to AD from SharePoint. Are the instructions what we need or are they more than what we need?

Thanks

http://technet.microsoft.com/en-us/library/hh296982.aspx