AD Forest Discovery : 2012 R2

Hello,

I have add to my SCCM 2012 R2 (5.0.7958.1000) a new domain to "Active Directory Forests". This new domain is on 2012R2 level. 

If I run the forest discovery tasks, I have this message in the log :

ERROR: [ForestDiscoveryAgent]: Failed to save data for domain XXXX in forest XXXX due to ActiveDirectoryOperationException. Discovery will be attempted on next cycle.

I have other domain but not in 2012 R2 and it's work fine. 

Can you help me ?

Thanks

July 8th, 2014 6:49am

Have you specified the correct credentials to be used with this new Domain?

Free Windows Admin Tool Kit Click here and download it now
July 8th, 2014 7:28am

Yes, I have. The discovery has detect the subnet and AD site for this domain. But I have all the time this message in the log
July 8th, 2014 8:10am

Hi,

You could use NETMON to get more information by tracing the discovery process from site server

Best Regards,

Joyce

Free Windows Admin Tool Kit Click here and download it now
July 9th, 2014 9:53am

Maybe this in first message help you:

http://social.technet.microsoft.com/Forums/en-US/09fba725-f400-4181-8ea7-7865201cc30e/re-smsadforestdiscoverymanager-error?forum=configmanagerdeployment

If you create a collection with query scan computer in specific O.U have you sucess?

Query:

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where   SMS_R_System.SystemOUName = "nameyourOU"

July 9th, 2014 3:02pm

In "Assets and Compliance", I can see the computer from my domain. But, if I look at the properties of the computer, I cannot see IP. But I can see the distinguised name, full domain name, etc.
Free Windows Admin Tool Kit Click here and download it now
July 10th, 2014 7:56am

Is your DNS configured correctly? Have you created conditional forwarders for the additional domain in the domain your ConfigMgr server is? Does nslookup clientindomainb.domainb.com resolve the IP address?


  • Edited by Narcoticoo Thursday, July 10, 2014 9:48 AM
July 10th, 2014 9:47am

Yes, I can dnslookup my end client in my domain from SCCM


Free Windows Admin Tool Kit Click here and download it now
July 10th, 2014 9:49am

And there aren't any firewalls between that might restrict the traffic?
July 10th, 2014 12:10pm

No, everything is good on the fireall.  I feel that the problem is that the domain that I have add is in 2012 R2
Free Windows Admin Tool Kit Click here and download it now
July 10th, 2014 3:57pm

That being 2012 R2 isn't a problem.
July 10th, 2014 4:07pm

Is't strange. I can see the computer, and the boundaries is populated with my subnet from the Active Directory Sites and Services. 

So, the account and the firewall is okay. 

If I go to "Administration", Active Directory Forest in SCCM console, and I click on my domain, I have nothing in the domain tab (Tabs are Summary, domains, discovery status,..).

In the ADForestDisc.log,  under my error I have 

Raising discovery success status message for forest XXXX, in which we discovered 1 site(s) and 5 subnet(s).

Free Windows Admin Tool Kit Click here and download it now
July 10th, 2014 4:37pm

I meant the firewall between domainb client and ConfigMgr server, not domain controller.
July 11th, 2014 6:29am

The FW is ok between the ConfigMgr and domain client
Free Windows Admin Tool Kit Click here and download it now
July 11th, 2014 7:00am

Did you get this one working?

September 17th, 2014 3:34am

No, I have still the problem. Have you got the same error ?
Free Windows Admin Tool Kit Click here and download it now
September 17th, 2014 5:54am

Did you get a resolution on this yet? I have a similar situation where the forest is discovered but nothing shows up under the domain tab. I still get the sites and subnets but the error still shows up in ADForestDisc.log.

I have 3 child domains also and they don't show up. The domain and forest functional level is 2012 R2

Also I have additional forests that are on 2008 R2 functional level that got discovered correctly and the domains show as they should. It appears like an issue related to 2012 R2 functional level?

Here is the error again:

ERROR: [ForestDiscoveryAgent]: Failed to save data for domain xxxxx  in forest xxxxx due to ActiveDirectoryOperationException. Discovery will be attempted on next cycle.

February 5th, 2015 7:40pm

Hello,

I have still the problem. I have found this : http://microsofttouch.fr/default/b/js/archive/2013/10/22/sccm-2012-r2-le-niveau-fonctionnel-de-domaine-active-directory-windows-server-2012-r2-n-est-pas-support-233

Free Windows Admin Tool Kit Click here and download it now
February 6th, 2015 2:08pm

Wow... This is from a french MVP saying that its a known compatibility issue with 2012 R2 forest functional level and that Microsoft will fix in the next version...

Thanks for that link. At least I know that I am not the only one or its not related to my environment.

Oz

February 6th, 2015 3:51pm

Any news on this thread? As far as I can see on SCCM SP1 CU4 - which was released in January, this issue was not on the list containing all the hotfixes....

Br,

Kim-Andre;)

Free Windows Admin Tool Kit Click here and download it now
March 18th, 2015 7:59am

No news as far as I know. The latest CU for SP1 is 5 btw. 
March 18th, 2015 8:40am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics