Setup:
acme.com as the parent; Config Manager installed here and working.
Three child domains: child1.acme.com, child2.acme.com and child3.acme.com
We are trying to get discovery working in the child domains. What do we need? When trying to add a forest, we use the computer account of the site server, it returns "Insufficient Rights Access". Should we create service accounts in the three child domains? Should the server account just be able to work? Do we need to extend the schema in the child domains as well?