PENDING SCCM in cross forest domain

[Amarjit Singh]

Hi Prajwal,

Hope you are doing good!

I have a client requirement to manage 40 domains that are in different forest connected through internet.
They want to provision software updates and endpoint security. Can we manage domains in different forest
with Site server in one domain only or i have to install 40 child server in each forest.

 

[Prajwal Desai]

Hi Amarjit,

To support domain computers in a forest that is not trusted by your site server’s forest, you can install site system roles in that untrusted forest, with the option to publish site information to the client’s Active Directory forest. Or, you can manage these computers as if they are workgroup computers. When you install site system servers in the client’s forest, the client-to-server communication is kept within the client’s forest and Configuration Manager can authenticate the computer by using Kerberos. When you publish site information to the client’s forest, clients benefit from retrieving site information, such as a list of available management points, from their Active Directory forest rather than downloading this information from their assigned management point.