Sharepoint 2013 user profile sync permissions problems

I’m trying to stand up a new SharePoint 2013 farm.

I've got an issue where we aren't syncing all of the user properties between sharepoint and AD, and it’s the email properties in particular that I’m after.

We’re using the AD import sync method instead of the full User Profile Service Sync. But I tried that anyway, and it’s made no difference. SharePoint was not installed withsingle server method, and I didn't let sharepoint auto config itself. I used the technet docs on doing the farm configs, so obviously I screwed something up.

I tried deleting and recreating the user profile service application, and it did nothing. I don’t see any problems in the UCS logs either, although I might just be missing it. There is no Exchange integration in this AD Domain, but the email attribute in AD is populated. Additionally, we've confirmed that the account I’m using for AD sync has the correct permissions for accessing AD.

My Sites is running a separate web application and user account then the general sharepoint content. In addition, we confirmed that the account used to sync with active directory has the correct AD permissions … replicate directory changes, etc …

Here's an screen shot of the user properties page after AD sync has been setup. As you can see, all properties are read only