Install client in untrusted domain
I have been trying to install the SCCM client on a DC in an untrusted domain in the same forest as the SCCM server. I can get the binary installation installed correctly, however, the client fails to configure as it reports that it cannot refresh the
MP information and thet the version of the MP is out of date. Client within the same domain as the server install with no problems.
I have tried specifying the MP and SLP on the command line of a manual install without success.
Murray
February 21st, 2011 12:48pm
A couple of points. First, if the domain is in the same forest, then it is actually a trusted domain.
Do you have an SLP? Is it published in WINS? For systems outside of the domain where ConfigMgr is installed, they cannot retrieve their info from AD and thus must use an SLP. To use the SLP, they must be able to locate it via WINS.
Alternatively, specify the SLP and MP at the command-line: CCMSETUP SMSSLP=myslp.domain.com SMSMP=mymp.domain.com
Also, is the system within the boundaries of the site?Jason | http://myitforum.com/cs2/blogs/jsandys | http://blogs.catapultsystems.com/jsandys/default.aspx | Twitter @JasonSandys
Free Windows Admin Tool Kit Click here and download it now
February 21st, 2011 1:15pm
Hi Murray,
Copy the installation files to a location in the untrusted domain and run the installation using those files. You still need to specify the commandproperties as suggested by Jason. You can also check this blog
http://blog.coretech.dk/kea/supporting-configmgr-workgroup-settings/
Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund
February 21st, 2011 1:38pm
Hi Jason and Kent.
Thanks for your replies, I have a couple of things to try now. I have already copied down the installation files to a local folder on the DC (c:\...\...\ccmsetup... etc). I have used command line switches with the SLP and MP, but didn't
use the FQDN of the SCCM server (MP is located on the same server), and I have forgotten to check that the IP range is within the site boundaries. This system is under change control so it will take a couple of days to get this tested. I'll report
back, many thanks for the suggestions.
Murray
Free Windows Admin Tool Kit Click here and download it now
February 21st, 2011 2:59pm