Cross Forest Discovery and Client Install

I'm working with a client who has five or six AD forests (resulting from acquisitions).  They have SCCM 2012 R2 SP1 up and running in one of the forests.  There's technically a trust relationship between that forest and the others, however, they're a mix of Windows Server 2003 and 2008 AD levels, so the trusts don't always work reliably from the 2008 R2 source domain (aka "domain 1").  That said, I've extended the schema in a 2003 forest ("domain 2"), created the System Management container, and delegated full control to the container for the MP in Domain 1.  Publishing doesn't seem to work though.  I also created a user account in domain2 and assigned that in the site publishing settings back in domain1.  Still no publishing.

Question:  Am I barking up the wrong tree with this approach?  Is this a scenario that works best with a separate MP or another site in the other domains?

The pain of this is that it's all temporary.  They're nearing completion of a whole new forest and there's a team working to migrate accounts over sometime by July-August 2015 (so far).  They want inventory from the other domains to feed into other projects (hardware, software inventory mostly).  I hate to think I'd need new sites or MPs just to go such a short distance.

May 26th, 2015 10:58pm

Your definitely on the right track. Rather than me re-writing whats already been done, check out the following blog series which describes in detail how to support untrusted forests

http://blogs.technet.com/b/neilp/archive/2012/08/20/cross-forest-support-in-system-center-2012-configuration-manager-part-1.aspx

Free Windows Admin Tool Kit Click here and download it now
May 27th, 2015 2:01am

The MP is not responsible for AD publishing, the site server is.

hman.log on the site server will contain info on publishing and should be your first place to check for troubleshooting info.

Also, client installation and functionality have very little to do with AD publishing. Clients being able to find info in AD is very helpful, but by no means required.

May 27th, 2015 9:24am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics