Before you can discover Active Directory sites and IP subnets in the Active Directory forest, you must first enable the Active ...

Before you can discover Active Directory sites and IP subnets in the Active Directory forest, you must first enable the Active Directory Forest Discovery method. The Active Directory Forest Account must have Read permissions to the forest.