New domain woes and configuration manager

Question

Hi

I have a dilemma with a customer.

They have a large user base and are moving/migrating from one AD domain to another. This is to address some issues around them making the move to the cloud.

They use MECM current branch but have had issues whilst migrating to the new domain.

They cannot connect to a device in the new domain such as using the remote tools “Remote Control” or “Remote Assistance”

They cannot deploy App-v applications through MECM to new domain user/group collection(s)

It seems the service accounts are not working within MECM Administration > Hierarchy Configuration > Active Directory Forest > Discovery & Publishing

Looking at this a few things pop into my mind.

  1. Make sure appropriate client push and network accounts are configured for new domain.
  2. Understanding how the AD forest/domain trust, would MECM need two way trust?
  3. Would it be worth creating a new MECM server for new domain?
  4. Would a CMG help with this?
  5. If using same AD could boundary groups and AD discovery help with seperating management for devices/users? Would AD sites and services need to be used to create that seperation?

I was thinking maybe for new devices if they move to Intune and embrace new devices there.

Could really do with some expert guidence on this one as I am not sure what would be the best approach here.

Many Thanks

solved 0
isotonic_uk 1 month 2 Answers 46 views Beginner 0

Answers ( 2 )

  1. Many thanks Anoop. Yes I agree DNS is likely to be part of the problem, maybe conditional forwarding. I am also thinking about how their AD sites and services are configured and then this could relate to how their discovery is performed in MECM.

    I’ll post an update on this and how we moved it forward for anyone else who may have similar issues.

  2. It’s a bit complex problem to troubleshoot in forum…

    I think it’s a DNS problem …

    If you provide specific domain server name instead of domain name that would help some times…

    AD forest discovery options is place where you get this ?

    https://www.anoopcnair.com/configmgr-sccm-untrusted-forest-ad-system-discovery-issue/?amp=1

    Best answer

Leave an answer

Sorry, you do not have a permission to answer to this question .