Install SCCM client to server in DMZ: "MP does not exist"

Question

Hi,
I’d need to put a management point/distribution point in a DMZ.
Therefore I wanted to make sure this MP/DP works before I move it to this DMZ and I:
*configured a Windows 2012 R2, (name: “DMZ01”) server with the prereqs*removed this server DMZ01 from the actual domain*added a DNS entry from DMZ to which I can connect successfully
*added a network access account in order to push the sccm client
*added correct boundary group
Now when I try to deploy an SCCM client to it, I get a failure in the ccmsetup log saying MP does not exist:
Failed to load mdmregistration.dll with error 0x8007007e          
ccmsetup           
27/04/2015 10:54:48       932 (0x03A4)
Failed to load mdmregistration.dll. Continue deployment.        
ccmsetup           
27/04/2015 10:54:48       932 (0x03A4)
An MP does not exist on this machine. ccmsetup           
27/04/2015 10:54:48       932 (0x03A4)
My questions:
*should I use the management point affinity here to force finding the management point?
*what about the domain certificate (that’s gone now since it isn’t domain joined anymore)? How to deal with this/revive this?
Please advise.
J.
Jan Hoedt

Answer 1

Ok, thanks.
Note: there is no trust between the DMZ domain and the domain in which the "main" sccm server exists.
What are the options there? F.e. could we use Mutual authentication just as with a Mac
https://technet.microsoft.com/en-us/library/jj591553.aspx#BKMK_ManualCertifcateInstallation
Jan Hoedt