locked
Mutipule Domains RRS feed

  • Question

  • Ive installed the MSI for SCCM Client to another domain we have a trust with...

    Problem:

    none of the clients look like there able to communicate with the MP/DP... The dp is on TEST01.local and the domain i am deploying the CM12 clients to is TEST02.local (so in short i have computers in another forrest and another domain and i have a trust in place between the 2 forrest, im trying to get the workstations on test02.local to talk to the mp/dp on test01.local.)

    all the workstations show  is the pic below...

    after deploying the MSI i have loaded the group policy for the client installation and set it to the pic you see below:

    any ideas why these workstations are not talking to the MP/DP on test01.local?

    Ive seen a few post as to how to connect workstation computers, i was hoping through the trust and creating a service account to be a administrator on all the workstations i would be able to have the server comunicate to the workstatsion and the workstations communicate to the server...

    Thanks


    Twitter: @dguilloryjr LinkedIn: http://www.linkedin.com/in/dannyjr Facebook: http://www.facebook.com/#!/dguilloryjr

    Wednesday, July 25, 2012 3:24 PM

Answers

  • ccmexec.log does not help. See LocationServices.log and ClientLocation.log if the client was able to retrieve site data at all.
    Have you enabled publishing to the remote AD forest at all?

    Torsten Meringer | http://www.mssccmfaq.de

    Friday, August 17, 2012 7:52 AM

All replies

  • Examine LocationServices.log. Have you configured publishing to the remote forest? Are there MP and DP in the remote forest? What type of trust is it? Here are alternative ways for configuring service location for clients: http://technet.microsoft.com/en-us/library/gg712701.aspx. Here's how to manage clients in remote forests: http://technet.microsoft.com/en-us/library/gg712701.aspx#Plan_Com_X_Forest

    Torsten Meringer | http://www.mssccmfaq.de

    Wednesday, July 25, 2012 3:33 PM
  • there is a 2way trust btween the forrest and it wokrs we have been using it for years.

    there is no MP/DP in the test02.local domain


    Twitter: @dguilloryjr LinkedIn: http://www.linkedin.com/in/dannyjr Facebook: http://www.facebook.com/#!/dguilloryjr

    Wednesday, July 25, 2012 3:36 PM
  • LSGetLookupMP: Failed to resolve lookup MP from WINS with 87D00215. Check if it is published LocationServices 7/25/2012 10:37:03 AM 2972 (0x0B9C)
    Begin checking Alternate Network Configuration LocationServices 7/25/2012 10:37:03 AM 2972 (0x0B9C)
    Finished checking Alternate Network Configuration LocationServices 7/25/2012 10:37:03 AM 2972 (0x0B9C)
    Current AD site of machine is Default-First-Site LocationServices 7/25/2012 10:37:03 AM 2972 (0x0B9C)
    Attempting to retrieve lookup MP(s) from AD LocationServices 7/25/2012 10:37:03 AM 2972 (0x0B9C)
    No lookup MP(s) from AD LocationServices 7/25/2012 10:37:03 AM 2972 (0x0B9C)
    Failed to resolve 'SMS_SLP' from WINS LocationServices 7/25/2012 10:37:13 AM 2972 (0x0B9C)
    LSGetLookupMP: Failed to resolve lookup MP from WINS with 87D00215. Check if it is published LocationServices 7/25/2012 10:37:13 AM 2972 (0x0B9C)
    Won't send a client assignment fallback status point message because the last assignment error matches this one. LocationServices 7/25/2012 10:37:13 AM 2972 (0x0B9C)

    just a snippet from the log you asked for...


    Twitter: @dguilloryjr LinkedIn: http://www.linkedin.com/in/dannyjr Facebook: http://www.facebook.com/#!/dguilloryjr

    Wednesday, July 25, 2012 3:39 PM
  • Have you extended the schema in both forests and published the site information to the trusted forest?

    Kent Agerlund | My blogs: blog.coretech.dk/kea and SCUG.dk/ | Twitter: @Agerlund | Linkedin: Kent Agerlund

    Wednesday, July 25, 2012 3:40 PM
  • no ive only extended the schema in the test01.local domain

    do i need to extend the schema in test02.local also?


    Twitter: @dguilloryjr LinkedIn: http://www.linkedin.com/in/dannyjr Facebook: http://www.facebook.com/#!/dguilloryjr

    Wednesday, July 25, 2012 3:42 PM
  • Have you read my answer or the link I provided? There are several way to manage clients in remote forests: one is by extending the schema and publishing ConfigMgr data in the remote forest. Or use an SLP. Or https mode. Or place MP and DP in the remote forest.

    Torsten Meringer | http://www.mssccmfaq.de

    Wednesday, July 25, 2012 7:24 PM
  • SLP is one way to do it and fairly straight forward to configure

    http://technet.microsoft.com/en-us/library/bb632435.aspx


    My Microsoft Core Infrastructure & Systems Management blog - blog.danovich.com.au

    Monday, July 30, 2012 1:28 AM
  • If we are talking ConfigMgr 2012 then there is no SLP. That site system is no longer available.

    Kent Agerlund | My blogs: blog.coretech.dk/kea and SCUG.dk/ | Twitter: @Agerlund | Linkedin: Kent Agerlund

    Monday, July 30, 2012 9:14 AM
  • The SLP as a separate site system is no longer available, but the MP provides the same functionality: http://technet.microsoft.com/en-us/library/gg712701.aspx: "The server locator point is no longer used, and the functionality of this site system role is moved to the management point."

    Torsten Meringer | http://www.mssccmfaq.de

    Monday, July 30, 2012 9:30 AM
  • going to extend the schema in the test02.local how do i publish the configman data in the remote forest

    Twitter: @dguilloryjr LinkedIn: http://www.linkedin.com/in/dannyjr Facebook: http://www.facebook.com/#!/dguilloryjr

    Thursday, August 16, 2012 5:56 PM
  • ok so i have the client installed (kinda), i still cant see the client in the controll panel on the other domain but i see the files being pushed to the client and the exe running in the task window....

    here is the complete log file:

    https://skydrive.live.com/redir?resid=AF4F28943607C660!5114&authkey=!AKerYM6dI3qzQFY

    Screenshot:


    Twitter: @dguilloryjr LinkedIn: http://www.linkedin.com/in/dannyjr Facebook: http://www.facebook.com/#!/dguilloryjr

    Thursday, August 16, 2012 10:15 PM
  • ccmexec.log does not help. See LocationServices.log and ClientLocation.log if the client was able to retrieve site data at all.
    Have you enabled publishing to the remote AD forest at all?

    Torsten Meringer | http://www.mssccmfaq.de

    Friday, August 17, 2012 7:52 AM