This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Remove From My Forums

Cross Forest MP - Client Communication

Question
0

Sign in to vote

I am planning to deploy MP in an untrusted forest.

http://blogs.technet.com/b/neilp/archive/2012/08/24/cross-forest-support-in-configmgr-2012-part-3-deploying-site-server-site-systems-in-an-untrusted-forest.aspx?wa=wsignin1.0

Is there any advantage of adding MP except auto approval provided site does not have large number of clients? What will happen if client is trying to PXE boot from trusted site as per this article PXE client get list of mp from db and suggested workaround is to change mp name. (http://support.microsoft.com/kb/2858397. It seems to me adding MP will add more complexity. Is there alternate method for client approvals (except manual and PKI)?

Please share your thoughts.

PrtkDv

Thursday, August 8, 2013 2:56 AM

All replies

0

Sign in to vote
Yes, you can have multiple MPs and DPs (with PXE) in untrusted forest. I've more than 3 MPs + DPs (with PXE) in untrusted forest without any problem.

1. Use SQL connection account to connect to DB from remote MP.

2. Select Require the Site server to Initiate Connection to this Site System option. More details here.

3. AD forest discovery account must have access to publish MP into system management container (untrusted forest). More tips here.

4. You can also perform AD Discovery on untrusted forest more details here.

5. If you've multiple untrusted forest under primary then take care of network access account configuration. More Details here. This is not required in CM 12 R2. In R2 we can have more than one network access accounts. More details here.

6. If you are looking to create TS boot media from untrusted forest DP. More tips here.

Anoop C Nair - @anoopmannur :: MY Site: www.AnoopCNair.com :: FaceBook: ConfigMgr(SCCM) Page :: Linkedin: Linkedin<
- Edited by Anoop C NairMVP Thursday, August 8, 2013 3:57 AM
Thursday, August 8, 2013 3:56 AM