System Management container in Multidomain environment (same forest)

Question

Greetings,
The scenario is the following:
1 root domain. 5 child domains. The schema was extended for Win2008 R2.
1 primary parent SCCM site (implemented in a child domain. 1 sccm server). 4 primary child SCCM sites (implemented in the 4 remaining child domains. 1 sccm server per child domain).
All of the SCCM servers are SP2 R3.
The System Management container was created in all of the child domains and the permissions was applied according to http://technet.microsoft.com/en-us/library/bb633121.aspx
In every AD site, in System Management container appears the information pertaining to its sccm server.
The questions are:
At the AD domain where is the parent sccm site, in its System Management container, all of the sccm servers must be granted permissions?
The System Management container must be created at the root domain? (and what would be the permissions?)
Thanks in advance!

Answer 1

Site servers write their information to the System Management container in their own domain (and only their own domain) thus you need to create the System Management container in each and every domain where there is a site server but only the site server
in that domain needs to be granted permissions in that domain.
Clients use the global catalog to query for info so the actual domain where the System Management container or objects contained therein doesn't really matter.
Jason | http://blog.configmgrftw.com