AD Forest Discovery - Failed to connect using default account

[gmandar]

Hi All,

I am facing issue while discovering the AD Forest discovery for other domain.

I am having below setup:

Domain - Fabrikam.org, SCCM Primary Site - CM01.Fabrikam.ORG

I am trying to discover resources from another forest - Contosso.COM

When I checked Administration-> Hierarchy Configuration -> Active Directory Forests node in SCCM console, it shows, Failed to connect using default account.

I am confused here..where should I check for presence / absence of site server account required for Forest Discovery of Contosso.COM.

Also if I have to use other option for discovery which is "Use Specific account"..where should I create that account and with what permissions ?

Thanks in advance.

Mandy