SCCM SYSTEM AND USER DISCOVERY DOESN'T WORK ANYMORE / ADSYSDIS.LOG ERROR: FAILED TO ENUMERATE DIRECTORY OBJECTS IN AD CONTAINER LDAP://

Question

Hello,

I have Issue with SCCM Discovery (Systems & Users) : No user and no new devise.

• DNS Resolution is fine (nslookup).
• Firewall is OK (Telnet to a DC with port 389,636,3268,3269 Works)
• Test LDAP Works from PowerShell : https://evotec.xyz/testing-ldap-and-ldaps-connectivity-with-powershell/
• 
• SCCM Primary Server (Alone) in the same Domaine.
• Boundry Groups and System Discovery method Well configured
• adsysdis.log
  
  Thank You

Answer 1

Hi @Hadjer YAHIAOUI ,

Please help check the active directory discovery account. It must have Read access permission to the Active Directory locations that you specify for discovery.
The screenshots for your reference:

The following links for your reference:
Discovery methods - Configuration Manager | Microsoft Learn
Accounts used - Configuration Manager | Microsoft Learn

Looking forward to your feedback.

Best regards
Cherry

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hello,

Thanks for your feedback,

Yes, Reda permission is assigned to the ad discovery Account anf Full Pemissions to the SCCM Server Computer Account.

But "Impersonating user[comaine\admin_user] to discover object" doesn't existe in my adsysdis.log

Answer 3

Hello,

I appreciate this article, it helps me to solve my sccm issue!

Thank you!

Best regards,

Adem