none
SCCM 2012 AD system discovery doesn't find computers

    Question

  • Hello

    I have a SCCM 2012 SP1 CU1 server in enterprise environment.

    Active Directory System Discovery is enabled.

    We have two forests with one way trust: TEST forest trusts PROD forest.

    in PROD forest I have 5 domains.

    My SCCM server is part of the PROD forest in domainA.

    In SCCM - Active Directory System Discovery, I enabled discovery on a specific OU in domainB (which is part of PROD forest) with a domain user who is a member of domainB.

    The problem is that SCCM find only few of the workstations in this OU. 

    Name resolution works fine between SCCM server and workstations.

    HTTP port from workstation to server is open.

    adsysdis.log doesn't show anything that can direct me to the source of the problem.

    Any advise for troubleshooting will be appreciated.

    Thanks,

    TH

    Sunday, August 04, 2013 8:38 AM

Answers

  • Hi

    I think we figured it already.

    it seems like a group policy disabled password change on the workstations.

    in discovery we left the default on exclude computers that didnt change password in last 90 days, so SCCM didnt discover them.

    thanks anyway,

    TH

    Sunday, August 04, 2013 11:59 AM

All replies

  • Please upload adsysdis.log to Skydrive.

    Torsten Meringer | http://www.mssccmfaq.de

    Sunday, August 04, 2013 8:52 AM
    Moderator
  • Hi Torsten

    thanks for your reply

    unfortunately I cannot upload adsysdis.log since it contains inside information.

    I did look at this log but didnt find bogus computers.

    Sunday, August 04, 2013 9:02 AM
  • How is discovery configured? Check the options to exclude computers frm discovery.

    Torsten Meringer | http://www.mssccmfaq.de

    Sunday, August 04, 2013 9:32 AM
    Moderator
  • Hi

    I think we figured it already.

    it seems like a group policy disabled password change on the workstations.

    in discovery we left the default on exclude computers that didnt change password in last 90 days, so SCCM didnt discover them.

    thanks anyway,

    TH

    Sunday, August 04, 2013 11:59 AM