SCCM Multiple Domains and AD Publication

myITforum.com Community Forum

Home Forums Blogs Live Support chat Search Articles Wiki FAQ Email Lists Register Login My Profile Inbox Address Book My Subscription My Forums

Photo Gallery Member List Search Calendars FAQ Ticket List Log Out

All Forums RSS Feed Subscription:

SCCM Multiple Domains and AD Publication

View related threads: (in this forum | in all forums)

Logged in as: Guest

Printable Version

All Forums >> [Management Products] >> System Center Products >> System Center Configuration Manager >> SCCM Multiple Domains and AD Publication

Page: [1]

Message

<< Older Topic Newer Topic >>

SCCM Multiple Domains and AD Publication - 4/10/2008 10:31:17 AM

mattc

Posts: 23
Score: 0
Joined: 1/18/2007
Status: offline

Question. I am currently developing our SCCM implmentation stradegy for my company. Unlike our SMS environment we will be utilizing AD site boundary's as opposed to our old method of subnet boundarys. Anybody that has worked wtih Subnet boundaries can contest that it can become a headache real fast. This has solidified the need to utilize AD sites. In the past we with SMS, the ability to use subnets allowed us to assign and manage clients in trusted domains within our forest with out a site server as part of that domain. Now that we are moving to AD sites it appears we will need a site that is actually part of that domain....or do we? I think we do in order to see the AD sites assigned to the trusted domain. Please somebody correct me if I am wrong.

Quick question...If we do place a site server in another trusted domain...how are AD extentions handled? For example....If my Central Site Server resides in Domain A along with other primary child sites....and the AD extentions have been made within that domain...what happens with my site server in Domain B? Should it also be publishing the this same extention? Or should it have its own AD extention in its domain?

The reason I am asking is because I am seeing issues in our lab environment with AD publishing from the server in Domain B. I am seeing several errors that it can not find the "System Managment" container blah blah. Our thought processes were that it would just publish to the extention we created for our other servers in Domain A. BTW we have a two way transitive trust between the domains...the Site server in Domain B has explicit full control rights over the AD extention that the other servers are publishing to.

Can anybody share some insight for me?

Post #: 1

RE: SCCM Multiple Domains and AD Publication - 5/8/2008 1:51:06 PM

rdixon

Posts: 16
Score: 0
Joined: 5/23/2005
From: rdixon5652@hotmail.com
Status: offline

Question. I am currently developing our SCCM implmentation stradegy for my company. Unlike our SMS environment we will be utilizing AD site boundary's as opposed to our old method of subnet boundarys. Anybody that has worked wtih Subnet boundaries can contest that it can become a headache real fast. This has solidified the need to utilize AD sites. In the past we with SMS, the ability to use subnets allowed us to assign and manage clients in trusted domains within our forest with out a site server as part of that domain. Now that we are moving to AD sites it appears we will need a site that is actually part of that domain....or do we? I think we do in order to see the AD sites assigned to the trusted domain. Please somebody correct me if I am wrong.

Answer: Ensure that each of your Site server computer account objects have read/write permissions on the Systems Management container. As long as all site servers are joined to a domain in the same forest is all that's needed.

Quick question...If we do place a site server in another trusted domain...how are AD extentions handled? For example....If my Central Site Server resides in Domain A along with other primary child sites....and the AD extentions have been made within that domain...what happens with my site server in Domain B? Should it also be publishing the this same extention? Or should it have its own AD extention in its domain?

Answer: When the ConfigMgr AD Extention are added to AD, it is stored in the Global Catalog. So each domain of that forest will utilize the ConfigMgr Extentions found in the GC. So your site would only need to be joined to a domain in the forest where the extentions were impletmeted.

_____________________________

Richard Dixon (MSFT)
Sr Systems Engineer

(in reply to mattc)

Post #: 2