Hi All, I have a doubt or question which i would like to clearify. We have a 3 domain Test1.com Test2.com Test3.com Where my CM Primary server is hosted on Test1.com and trust between Test1.com and Test2.com and Test1 and Test3.com is one way. I need to configure a Secondary Server in Test2 Domain and second Secondary server in Test3 domain. In order to enable to communication between Primary CM Server and new secondary server I need to add computer account of Test2 domain secondary server and of Test3 domain Secondary Server. My question is as there is one way trust between Test1.com and Test2.com and between Test1.com and Test3.com we cant add computer account. Let me know in case of any doubt. Thanks in Advance.

Based on your description, these domains are in fact in separate forests. If so, then it is not supported to install a secondary site in an alternate forest even if a trust exists: http://technet.microsoft.com/en-us/library/bb694003.aspx. Are these domains geographically separate? If not, then why install a secondary site? If so, then the best option is to install the secondary site server as a amember of Test1.com but co-locate it with the other domain systems fof Test2.com and Test3.com. Can you please comment on what scneario you are trying to address with secondary sites?Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys

All These 3 domains are in the same forest (however they have one way trust between them.) These Domains are geographically in same location. Need of Secondary server is to use it as DP. Also if you could explain about If so, then the best option is to install the secondary site server as a amember of Test1.com but co-locate it with the other domain systems fof Test2.com and Test3.com.

All These 3 domains are in the same forest (however they have one way trust between them.) These Domains are geographically in same location. Need of Secondary server is to use it as DP. Also if you could explain about If so, then the best option is to install the secondary site server as a amember of Test1.com but co-locate it with the other domain systems fof Test2.com and Test3.com.

All These 3 domains are in the same forest (however they have one way trust between them.) That's not possible. By defintion, domains in the same forest have a full two-way transitive trust between them: http://technet.microsoft.com/en-us/library/cc773178(WS.10).aspx. Also, you don't need a secondary site to have a DP. Secondary sites are strictly for bandwidth control. If the domains are physically co-located, there should be no bandwidth issues. Also, clients do not care what domain a DP is in and will work cross-forest without issues. ConfigMgr in general, although it can leverage AD to make service location easier, doesn't really care about or use AD domains.Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys

Hi Jason, I was wrong actually. just had a discussion with one of my colleague. They are 3 diffrent forest which have one way transitive trust between them.

So, that takes us to why you want to use secondary sites which are strictly for bandwidth control?Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys

Got your point. Does that means we need to setup Primary server in each of the forest and then one central server to which all primary server will be reporting? We have this same SMS environment running with one Primary Server and planning to upgrade to SCCM thats why would like to clear all doubts before planning it. Or if you could quickly expain how the complete infrastructure should be planned?

Depends. What is the purpose of the three different domains? Why do you want three separate primary sites? Technically, there is no reason one primary site can't be used for all three -- as I said above, ConfigMgr does not care about domain or forest boundaries for client management. It can manage clients across any type of boundary as it uses certificates for authentication. Without knowing the political reasons behind the three domains and your administrative model, I can't say what is right for you though.Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys

Hi Jason, Thanks Jason for the reply. I need to dig a lot to understand the concept. Thanks a lot for all your help.