Hi All, With reference to http://social.technet.microsoft.com/Forums/en-US/configmgribcm/thread/8f07cf97-ba01-4080-8950-2dbd0099a83e, I would like to post this question into this forum. I have AD structure as follows: Root Domain: CORP.XYZ.IN Three Child Domains: ABC1.CORP.XYZ.IN, ABC2.CORP.XYZ.IN, ABC3.CORP.XYZ.IN I have Root CA server (offline) and Sub-ordinate CA Server (certificate Issuing), both are in ABC1.CORP.XYZ.IN domain. I need to deploy IBCM site server in ABC3.CORP.XYZ.IN domain. Purpose is to provide IBCM functionality to roaming clients from all of the four domains (root and three child domains). Here I want inputs on the following points: 1. Is this purpose can be achievable with this infrastructure? or any additional requirement? 2. Do I want CA server in ABC3.CORP.XYZ.IN domain? 3. How the Computer certificate will be installed on the clients if the domain joined machines are not in the intranet (for across all the domains)? Is it possible with the help of Web Enrollment method?(as computers are not in the corporate LAN) 4. How the Computer certificate will be installed on the clients if the workgroup machines are not in the intranet (for across all the domains)? 5. Which ports are required between clients (across all the domains) and issuing CA server & root CA server? Need inputs on this. Thanks in advance. Thanks & Regards, Kedar

Hi All, Waiting for inputs. Need help. Thanks & Regards, Kedar