How to configure and select additional forest in the SEE configuration wizard
To synchronize with additional Active Directory forests, click Add. The status text above the right side of the Active Directory Forest Name field will update to display 2/2 AD Forest, indicating that the configuration settings for the second of a total of two forests are currently displayed. Type the configuration information for the new forest.
Click Delete to remove the configuration information for the currently displayed forest, or click Prev to view the configuration information for the previous forest.
Domain filtering allows you to exclude specific Active Directory domains from synchronization while including others. For example, there may be domains within your forest(s) that do not contain Symantec Endpoint Encryption Client Computers. To improve performance and usability, you can exclude these domains from being synchronized.
To use the domain filter, click Configure Domain Filters.
In the Include Computers from column on the left, select a domain you wish to exclude, then click > to move the domain into the Exclude Computers from column on the right. Moving a parent domain from the Include Computers from column to the Exclude Computers from column will also move all child domains of that parent domain.
In a typical deployment, you would exclude the top level of a domain, then include only those child domains containing Symantec Endpoint Encryption Client Computers. Click OK when finished.