Currently, Symantec Endpoint Encryption Management Server (SEEMS) has the ability to manage Server Roles for Users/Groups in the domain that it is joined to. Users/Groups from other domains, cannot be added. This includes Child/Parent domains, as well as additional Forests that have been configured in the SEEMS Configuration Manager.
Support has worked directly with Product Management and has determined this feature will not be included at this time. Please subscribe to this article for any updates. To be added to this Feature Request, please contact support who will track specific customer requests therein.
Workaround:
As a workaround, if Server Roles need to be configured for Users/Groups from multiple domains, a SEEMS can be installed on a machine in each domain that needs Users/Groups added, and connect it to the same database. Server Roles for Users/Groups in each domain can then be added from the SEEMS in that respective domain.