Deploying Sophos AV to multiple forest

Hi All,

I have the following enterprise office setup:

1. ForestA is where the Sophos Enterprise Console is installed and managing the endpoints.

2. ForestB is another company which has just joined my organisation.

I have setup SEC to import computers and containers from Active Directory from both forest and into separate container on SEC. I have also setup synchronise update from the 2 Active Directory. I am having trouble pushing SophosAV to ForestB and end up having to install SophosAV from the workstation in ForestB. I have created a user with sophos rights and domain admin right in both forest and I still can't push to ForestB.

Questions:

1. Is there a document on how to manage different active directory on a single SEC installation?

2. Is there a document on "Manage roles and sub-estates" and how I can use it in my setup?

Thanks & Regards,

Lawrence Giam.