Deploying / installing SCCM 2012 for Multiple Domain

[sholay]

Hi,

Need help / advice from scratch, how to deploy SCCM 2012 in a multiple domain environment so that we can run push/advertise across multiple domain, run reports, run quires. What things to keep in mind as a pre-requisite and post-requisite.

 

 

[Peter van der Woude]

Important thing is that a network access account is configured, so the client can access the resources.

 

Also this might be handy for pushing clients: http://www.petervanderwoude.nl/post/using-client-push-installation-on-untrusted-forest-systems-with-configmgr-2012/

[sholay]

Thanks Peter, make sense of configuring Network access account for the client be able to access resources, you have talked about client push installation on untrusted forest, but what if we need to setup for multi DOMAIN forest which will be trusted, will there be different things to keep in mind?

 

Primary role for the begning will be generating inventory report for MULTI DOMAIN FOREST, can you guide / point where I can find the detailed info for using SCCM 2012 for inventory for MULTI DOMAIN.

[Peter van der Woude]

Once the client is installed and the system can resolve the name of the MP your already good to go.

[sholay]

Is there anywhere I can get detail or step by step info to configure and install SCCM 2012 for MULTIPLE DOMAIN Enviornment.

[mauriciolazo]

pretty much, there is no detailed guide, although the guide provided by Peter van der Woude is really excellent in pointing you in the right direction. Take his steps, apply them to your situation. It can be summarized like this:

 

- Communications between the intended management point and the "other domain" clients

- The SCCM administrator account from your current domain has admin permissions on your "other domain" (meaning it has the permissions that Microsoft documentation asks for a SCCM admin)

- The sccm admin account and the servers accounts have full control over the "System Management" container in your "other domain" active directory.

- You have enabled "System Discovery" in your current domain, and also added the "other domain" to be discovered. (With this task it may not be a good practice to just add "theotherdomain.com" to the system discovery, it would be best to add specific containers or groups in order to have a more granular approach in finding clients)

 

There are other permissions that Microsoft documentation and also several tutorials here can help you out in order to take control over the clients in another forest wether if it is untrusted or not. Peter van der Woude even has a tutorial to take control over clients in Workgroups!! That's fantastic!

 

Anyway, what I wrote were really simple steps to get you going.