Hi Everyone,

I'm running SMS 2003 with a single site.  I have a central HQ and 2 AD connected remote sites thru VPN.  Advanced security is being used, not legacy.

I am not able to discover to remote subnets by AD discovery.  I would rather not use SNMP.  I don't have it setup.

Is there any other alternatives to discovering client PCs on a remote network?

 Thanks,

 Vince

You have a mixed question. Your post title says "Network Discovery" and you also mention missing subnets by AD discovery. These are 2 separate discovery methods. AD discovery will read into AD and pull the objects to populate SMS, such as computers, groups and users. Network discovery is really not used anymore by most. If you are talking about Network Discovery and the tab that shows the subnets, then I can see your point. Subnets that have yellow padlocks are subnets that are found by SMS and cannot be deleted. Network discovery simply reads into the ARP cache on the routers. If your network team has thsi blocked, then you will not get the subnets.

Either way, you don't need Network Discovery. use the AD discovery methods and you should be fine. Add in the boundaries to your SMS servers. For any machines that come in and show not assigned, double click the resource, check the subnet and make sure it's in the boundary list for that site.

Maybe your VPN has the ports needed to let SMS work closed. http://support.microsoft.com/kb/826852