Hi,

I have added an untrusted forest to my active directory forests in SCCM 2012 R2.

My question is: Do I need to extend the schema in the untrusted forest using the tool Configuration Manager provides (extadsch). I ask this because I get the Active Directory schema not extended'.

Would this be related in that I can push clients out to workstations in the untrusted forest however are not reporting as Active in the SCCM console. The account I'm using in the untrusted forest has domain admin rights.

I used this - shttp://www.petervanderwoude.nl/post/using-client-push-installation-on-untrusted-forest-systems-with-configmgr-2012/ a guide and this - http://blog.coretech.dk/kea/multi-forest-support-in-configmgr-2012-part-i-managing-clients-in-an-untrusted-forest/ as guides

Any clarification would be much appreciated.

Kind Regards,
Travis

• Edited by Travis_83 21 hours 21 minutes ago

Yes you need to extend the schema in the untrusted forest.

Would this be related in that I can push clients out to workstations in the untrusted forest however are not reporting as Active in the SCCM console. The account I'm using in the untrusted forest has domain admin rights.

Yes and no. Don't confuse pushing a client successfully with that client actual being able to communicate with the site -- they are two different things although one does depend upon the other.

Will not extending the schema and successfully publishing info to the forest affect client push? No. Could client push be failing for many other reasons? Yes. You need to check ccm.log on the site server and then ccmsetup.log on the target clients.

Will not extending the schema and successfully publishing info to the forest affect the clients communicating with the site? Potentially as the forest is a convenient location for clients to use to locate site information. You would have to check the logs on the client to know for sure including clientidmanagerstartup.log, clientlocation.log, and locationservices.log.