AD Forest Discovery : 2012 R2
Hello,
I have add to my SCCM 2012 R2 (5.0.7958.1000) a new domain to "Active Directory Forests". This new domain is on 2012R2 level.
If I run the forest discovery tasks, I have this message in the log :
ERROR: [ForestDiscoveryAgent]: Failed to save data for domain XXXX in forest XXXX due to ActiveDirectoryOperationException. Discovery will be attempted on next cycle.
I have other domain but not in 2012 R2 and it's work fine.
Can you help me ?
Thanks
July 8th, 2014 6:49am
Have you specified the correct credentials to be used with this new Domain?
July 8th, 2014 7:28am
Yes, I have. The discovery has detect the subnet and AD site for this domain. But I have all the time this message in the log
July 8th, 2014 8:10am
Hi,
You could use NETMON to get more information by tracing the discovery process from site server
Best Regards,
Joyce
July 9th, 2014 9:53am
Maybe this in first message help you:
http://social.technet.microsoft.com/Forums/en-US/09fba725-f400-4181-8ea7-7865201cc30e/re-smsadforestdiscoverymanager-error?forum=configmanagerdeployment
If you create a collection with query scan computer in specific O.U have you sucess?
Query:
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.SystemOUName = "nameyourOU"
July 9th, 2014 3:02pm
In "Assets and Compliance", I can see the computer from my domain. But, if I look at the properties of the computer, I cannot see IP. But I can see the distinguised name, full domain name, etc.
July 10th, 2014 7:56am
Is your DNS configured correctly? Have you created conditional forwarders for the additional domain in the domain your ConfigMgr server is? Does
nslookup clientindomainb.domainb.com resolve the IP address?
-
Edited by
Narcoticoo
Thursday, July 10, 2014 9:48 AM
July 10th, 2014 9:47am
Yes, I can dnslookup my end client in my domain from SCCM
-
Edited by
Sebastien Girard
Thursday, July 10, 2014 9:51 AM
July 10th, 2014 9:49am
And there aren't any firewalls between that might restrict the traffic?
July 10th, 2014 12:10pm
No, everything is good on the fireall. I feel that the problem is that the domain that I have add is in 2012 R2
July 10th, 2014 3:57pm
That being 2012 R2 isn't a problem.
July 10th, 2014 4:07pm
Is't strange. I can see the computer, and the boundaries is populated with my subnet from the Active Directory Sites and Services.
So, the account and the firewall is okay.
If I go to "Administration", Active Directory Forest in SCCM console, and I click on my domain, I have nothing in the domain tab (Tabs are Summary, domains, discovery status,..).
In the ADForestDisc.log, under my error I have
Raising discovery success status message for forest XXXX, in which we discovered 1 site(s) and 5 subnet(s).
-
Edited by
Sebastien Girard
Thursday, July 10, 2014 4:40 PM
July 10th, 2014 4:37pm
I meant the firewall between domainb client and ConfigMgr server, not domain controller.
July 11th, 2014 6:29am
The FW is ok between the ConfigMgr and domain client
July 11th, 2014 7:00am
Did you get this one working?
September 17th, 2014 3:34am
No, I have still the problem. Have you got the same error ?
September 17th, 2014 5:54am
Did you get a resolution on this yet? I have a similar situation where the forest is discovered but nothing shows up under the domain tab. I still get the sites and subnets but the error still shows up in ADForestDisc.log.
I have 3 child domains also and they don't show up. The domain and forest functional level is 2012 R2
Also I have additional forests that are on 2008 R2 functional level that got discovered correctly and the domains show as they should. It appears like an issue related to 2012 R2 functional level?
Here is the error again:
ERROR: [ForestDiscoveryAgent]: Failed to save data for domain xxxxx in forest xxxxx due to ActiveDirectoryOperationException. Discovery will be attempted on next cycle.
February 5th, 2015 7:40pm
Hello,
I have still the problem. I have found this : http://microsofttouch.fr/default/b/js/archive/2013/10/22/sccm-2012-r2-le-niveau-fonctionnel-de-domaine-active-directory-windows-server-2012-r2-n-est-pas-support-233
-
Proposed as answer by
Jörgen NilssonMVP, Moderator
Wednesday, February 18, 2015 7:48 AM
-
Marked as answer by
Sebastien Girard
Wednesday, February 18, 2015 12:49 PM
February 6th, 2015 2:08pm
Wow... This is from a french MVP saying that its a known compatibility issue with 2012 R2 forest functional level and that Microsoft will fix in the next version...
Thanks for that link. At least I know that I am not the only one or its not related to my environment.
Oz
-
Proposed as answer by
Jörgen NilssonMVP, Moderator
Wednesday, February 18, 2015 7:49 AM
-
Unproposed as answer by
Jörgen NilssonMVP, Moderator
Wednesday, February 18, 2015 7:49 AM
February 6th, 2015 3:51pm
Any news on this thread? As far as I can see on SCCM SP1 CU4 - which was released in January, this issue was not on the list containing all the hotfixes....
Br,
Kim-Andre;)
March 18th, 2015 7:59am
No news as far as I know. The latest CU for SP1 is 5 btw.
March 18th, 2015 8:40am