Hi,

We are using AD security group based membership. Also, we are uing the same SCCM infra to cover other domains as well.

From Activie Direcoty, it could able to discover the machines (computer objects) belongs to other domains but those computer objects not reflecting onto the collections.

Any suggestions woud help us!

Many Thanks.

What do you mean they don't reflect AD? Provide an example with screenshots.

Are you trying to add AD user group in SCCM collection membership?

And you are not able to view the computer object in the AD user group collection?

If so check the below ones,

  Make sure you enter the correct AD user group name.

  check Adsgdis.log and Adsysgrp.log AD group name.

   Check the AD replication.

Scenario:

Created query based collection (based on AD group) to pick the computer accounts which are member of that AD goup. Basically the computer objects are present in other domains.

Issue is:

W to discover (resolve the computer objects) in AD. Computer objects added to AD group.

But those computer objects are not getting updated to the collection.

Checked everything, no clue in the log.

Scenario:

Created query based collection (based on AD group) to pick the computer accounts which are member of that AD goup. Basically the computer objects are present in other domains.

Issue is:

W to discover (resolve the computer objects) in AD. Computer objects added to AD group.

But those computer objects are not getting updated to the colle

Check your collection refresh interval also is any machines added to the AD group getting populated ie. from the same domain xxx ? if so, i think you need to add the IP sub-net details on the boundary and also  discover the another domain machines using LDAP query for it(ex. sccm discovers and manages xxx domain where as its not discovering yyy domain machines becoz its not discovered ,you can also do it using the IP subnet details ie n/w discovery) the machines to the ALL systems then it may get added to the collection.