Ok I am in a huge pickle now, I have 2 sccm sites one is for servers one is for workstations, spread across 4 different domains, and 2 forests. We are running the site in mixed mode, and I ran my script to manually set the servers to one site and the workstations to the other, using sccm to push the scripts out to the non site servers on the workstation sccm site and the opposite on the other. Now I have around 600 servers that are getting Error: 0x80040309 when I look in the ClientIDManagerStartup.log, I have accept that I may have to go out to the clients individually and fix every one, I am just hoping there is an easier way to do this, I have tested the script out before and this didn't happen, so does anyone have any ideas? Some help would be greatly appreciated, I have no idea how I am going to get them all fixed by our next patching period.

Hello - Is there any trust relationship between the forests? Boundaries are assigned properly ? Also, check out http://technet.microsoft.com/en-us/library/bb694003.aspx ( Configuration Manager in Multiple Active Directory Forests )Anoop C Nair - This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

there is a trust, I did find out that if I add ccmsetup /uninstall in my script, I don't run into these issues, if I uninstall and then reinstall then it works. However that doesn't help me now, unless I go out to every single client.

Without knowing a lot more about your issues I can't suggest an exact fix, but visiting each machine is the worst possible option. Why don't you do things remotely and use psexec where needed? Have you tried using Client Center to delete the client certificates and restart the agent?Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys

The way that I understand SCCM is that if you are using it in mixed mode, there is no certificate, am I wrong? The only reason I am going to each machine is that I have a script that I can run that will map the drive to where the install file is and uninstall and reinstall the client with the settings that I need, since I am trying to seperate all the servers and workstations onto different SCCM instances in 2 different forests. Does that help at all?

That is incorrect. In mixed mode, the certificates are self-generated and self-signed by the clients instead of a PKI issued certificate required by native mode. If you have a script, why not use psexec to distribute it?Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys