SOLVED Active Directory Discovery failed after upgrade SCCM to 1910

[mjklomp]

Hello All,

This week I updated SCCM to 1910 without any issues (all compnents were green). After that I applied the hotfix KB4538166 without issues.
But a few days later I saw my collections filled with Active Directory objects are all empty. So I checked the AD logfiles and I saw two specific errors in all of the three AD logfiles:

"D:\Program Files\Microsoft Configuration Manager\Logs\adsgdis.log"
"D:\Program Files\Microsoft Configuration Manager\Logs\adsysdis.log"
"D:\Program Files\Microsoft Configuration Manager\Logs\adusrdis.log"

ERROR: Failed to look up DNS forest GUID error = 1355
ERROR: Failed to enumerate directory objects in AD container LDAP://..............

The errors started right after the first update of 1910.

From my SCCM console I can browse to Active Directroy from all of the AD Discovery Methods.

I googled a lot on both errors but I cannot find any solution yet.

Maybe anyone here has seen this error before.

Please let me know.

 

[Gokul]

is it trusted or untrusted Forest ?

 

[rem2kay]

Hello,
I have the same case with a fresh new sccm install.

ERROR: Failed to enumerate directory objects in AD container LDAP://DC=EUROPE,DC=TOTALCO,DC=COM

ERROR: Failed to look up DNS forest GUID error = 1355

is a trusted domain in a forest.

 

[mjklomp]

Hello,
I have the same case with a fresh new sccm install.

ERROR: Failed to enumerate directory objects in AD container LDAP://DC=EUROPE,DC=TOTALCO,DC=COM

ERROR: Failed to look up DNS forest GUID error = 1355

is a trusted domain in a forest.

This problem was solved after creating a firewall rule to the forest.
The network firewall was changed and they were forget to create a rule for communication from the server to the forest.

 

[rem2kay]

This problem was solved after creating a firewall rule to the forest.
The network firewall was changed and they were forget to create a rule for communication from the server to the forest.

Hi ,
do you have more detail about the FW rule?

 

[Kook]

This problem was solved after creating a firewall rule to the forest.
The network firewall was changed and they were forget to create a rule for communication from the server to the forest.

i have same issue
ERROR: Failed to look up DNS forest GUID error = 1355
ERROR: Failed to enumerate directory objects in AD container LDAP://.............

Help me please.