Hi All,
I have gone around the houses with this including to microsoft and nobody has been able to help so far, am hoping someone here will at least be able to point me in the right direction.
my scenario:
I have 4 management servers on parent domain, lets say :
SCOM1.parent.domain.local
SCOM2.parent.domain.local
SCOM3.parent.domain.local
SCOM4.parent.domain.local
I have a few servers i need to manage on different child domains lets say
SCOMAgent.Child.Parent.domain.local
There is a full 2 way transitive trust between the 2 domains hence I am NOT using certs.
I have run wireshark and confirmed that network isnt the problem (however i must admit networking isnt my strong point so any pointers or re-confirmation i will gladly do)
I have used portqry / telnet and confirmed that i am able to connect to the following ports
>from agent to MS telnet 5723, 135, 139, 445
As the SCOM run as account i am using a domain account (parent\scom_action) and i have manually added this user into the local administrators group of the agent server, so we can rule out any permissions issue.
In SCOM my security settings (agent onboarding) for agents are "Review first" and yes i normally check that the agent hasnt appeared in "pending management"
The parent\scom_action account is a local admin of the machine i am deploying the agent to
My agentpendingaction table is empty so there are no agents blocking any new actions
I am able to deploy successfully to other servers in the same parent.domain.local domain, I am just having trouble with agents in the child.parent.domain.local.
The error I am getting is :
on the agent :
The OpsMgr Connector connected to SCOM1.Parent.local, but the connection was closed immediately after authentication occurred. The most likely cause of this error is that the agent is not authorized to communicate with the server, or the server has not
received configuration. Check the event log on the server for the presence of 20000 events, indicating that agents which are not approved are attempting to connect.
This is followed by:
The Health Service cannot verify the future validity of the RunAs account Parent\scom_action for management group SCOM_GROUP due to an error retrieving information from Active Directory (for Domain Accounts) or the local security authority (for Local Accounts).
The error is The RPC server is unavailable.(0x800706BA).
And follwed by:
The Health Service was unable to validate any user accounts in management group SCOM_GROUP.
The only error I see on the managementserver is : "SCOMAgent.child.parent.domain.local is not heartbeating"
I am not sure what to do next to be honest and any pointers would be gratefully acccepted.
