Thanks for the reply. I have found a boundary that did not exist and has about 500 devices on it. When I spot checked computer names in SCCM, they were reporting in, sending inventory, and getting software package distribution. I was baffled. My searching found only a few way you could assign a computer to a site, https://technet.microsoft.com/en-us/library/gg682060.aspx. 1. I know at imaging time (stand alone MDT) they use sitecode=auto. 2. No one is going open the control panel and manually change it. 3. All of the boundary groups have 'Use this boundary group for site assignment checked'. 4. Each of the 2 sites have 2 assigned Fallback DP's. These DP's do have a couple of boundary groups assigned to them also. If a computer not in a known boundary is randomly referred back to a Fallback DP, will it auto assign to that site. And since I have 2 sites, does that mean site assignment for these computers can be random?
I had to do some walking around to other groups but finally think I figured it out. Once upon a time they were in a boundary I have in SCCM. In the past few months the network team has changed the DHCP scope there twice. The first time to another boundary I had named for a different site and the second time to the current boundary I did NOT have. Now it seems that the person who set up this SCCM allows every device to use either use Internet or Intranet if it picked up a PKI cert from GP. A look in the logs showed that the computers were getting packages from *Intranet* Fallback DP's but were getting policy from *Internet *bound MP's. My goal, should I choose to accept it, is to find out how many more sites are like this. So... I found a script that can find computers in the database that are in subnets with no boundaries. That is how I found these. What I am trying to do now is find boundaries that have No devices in them. You could do that in 2007 using 'ProtectedSiteSystem_ARR'. That no longer exists in 2012. Has anyone come up with a way to do that in 2012. In the mean time, I am going to see if I can somehow reverse engineer this one. SELECT DISTINCT v_R_System.Name0, v_R_System.Client0, v_RA_System_IPAddresses.IP_Addresses0, v_RA_System_IPSubnets.IP_Subnets0, v_RA_System_SMSAssignedSites.SMS_Assigned_Sites0 FROM v_R_System LEFT OUTER JOIN v_RA_System_IPSubnets ON v_R_System.ResourceID = v_RA_System_IPSubnets.ResourceID LEFT OUTER JOIN v_RA_System_IPAddresses ON v_R_System.ResourceID = v_RA_System_IPAddresses.ResourceID LEFT OUTER JOIN v_RA_System_SMSAssignedSites ON v_R_System.ResourceID = v_RA_System_SMSAssignedSites.ResourceID WHERE (v_RA_System_SMSAssignedSites.SMS_Assigned_Sites0 IS NULL) AND (NOT (v_RA_System_IPAddresses.IP_Addresses0 IS NULL)) AND (v_R_System.Client0 IS NULL) AND (NOT (v_RA_System_IPSubnets.IP_Subnets0 IS NULL)) order by v_RA_System_IPSubnets.IP_Subnets0 Thanks again, Dave On Mon, Mar 16, 2015 at 3:59 PM, Merenda, Kenneth <[email protected] > wrote: > Boundaries are for content distribution and (optionally) for site > assignment. > > > > For content, if the client is outside the defined boundaries of the DP’s, > it will go to a fallback DP, if available and if the content/deployment is > configured to allow use of fallback. > > > > If you have multiple sites, the client should go to the site it is > assigned to. > > > > *Kenneth Merenda* > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *David Jones > *Sent:* Monday, March 16, 2015 12:49 PM > *To:* [email protected] > *Subject:* [mssms] Boundary Question > > > > If a boundary is not defined. Will computers that exist within undefined > subnet/range still be managed? Will they just use any DP that is marked as > fallback or does not have any boundaries assigned? If you have more than > one site, how will they know which one they are assigned to? > > > > Dave > > > > > >
