Trusted Forest (Single Label Domain)

We have a forest " with SCCM 2012 R2 installed. This forest has a Trusted relation with another forest "Domain2". "Domain2" is "Single Label Domain"

1) Could I discover computers on "Domain2" Domain??

2) Must I configure "Domain2" Domain as "Disjoint Namespace" ??

3) Must I configure something on "" ?

January 17th, 2014 1:27pm

Why don't you just try it? Discovery is a read-only process when it comes to AD.
1: yes
2: not sure
3: no
Free Windows Admin Tool Kit Click here and download it now
January 17th, 2014 1:39pm

I have some doubts...

Except for out of bandmanagement, Configuration Manager supports site systems and clients in a single label domain when the following criteria are met:

  • The single label domain in Active Directory Domain Services must be configured with a disjoint DNS namespace that has a valid top level domain.

    For example: The single label domain of Contoso is configured to have a disjoint namespace in DNS of Therefore, when you specify the DNS suffix in Configuration Manager for a computer in the Contoso domain, you specify and not Contoso.

January 17th, 2014 2:53pm

1) it's NOT possible. Discoveries don't work (with computer account or user accounts)

2) I'm sure that I have to configure DNS on "Domain2" because is a Single Label Domain. This action requires applications testing.

3) I'm not sure.

Free Windows Admin Tool Kit Click here and download it now
January 17th, 2014 3:27pm


Please make sure the specified account has Read permission to Domain2.

 And here is a blog about discover computers in another trusted domain, although it is for SCCM 2007. Hope this could be helpful.

SCCM | Discover Another Trusted Domain

Best Regards,

Joyce Li


January 20th, 2014 7:02am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics