Installing SCCM 2012 R2 across un-trusted forests

[OsamaAlaydi]

Hi.

I`m working on implementing SCCM 2012 R2.

My goal is to build a System Center environment that is able to do both monitoring, antivirus and deployments . All systems are based on Microsoft technologies.

Our current environment is build up with 2 different forests, and has NO trust between them.

Forest A – has about 100 servers in the same domain.

Forest B – Has about 150 servers in the same domain.

Am deploying a single primary (Forest A) and then site roles in the Forest B (Site system, Management point, Component server and Distribution point)

I have no AD trusts.

Both Forest Discovery and Publishing Status are Succeeded.

Am getting the following error in ADForestDisc.log:

+ERROR: [ForestDiscoveryAgent]: Successfully connected to forest Forest B. But failed to discovery details of forest as Active Directory Server is not responding to service requests. Either server is busy or it just went down. Discovery will be attempted on next run. Error Information: The RPC server is unavailable.~~~~Name: "Forest B"

+Trying to discover forest name for server sccmsrv02.ForestB.

+Failed to get the domain basic info for machine sccmsrv02.ForestB. Error returned is: 5

The account used have already full control for the system management container (ForestB and local administrator sccmsrv02.ForestB

A related Issue (Maybe)

Under Discovery Methods -> Active Directory System (Or User) Discovery -> Active Directory Container --> Browse LDAP path, am getting always a Message to input the password for the account used to ldap the untrusted domain. "Is this normal behavior?"

Apperciate any help provided to figure out how to troubleshoot this issue.

Thanks