I come up with this. It works. SELECT IP_Subnets0 AS 'Subnets Detected',
vSMS_Boundary.Value AS 'Boundary Values', COUNT(ResourceID)AS 'Count of Devices on Subnets Detected' FROM v_RA_System_IPSubnets Full Join vSMS_Boundary on vSMS_Boundary.Value = v_RA_System_IPSubnets. IP_Subnets0 Group By vSMS_Boundary.Value, v_RA_System_IPSubnets.IP_Subnets0 Dave On Tue, Mar 17, 2015 at 7:57 AM, David Jones <[email protected]> wrote: > Thanks for the reply. I have found a boundary that did not exist and has > about 500 devices on it. When I spot checked computer names in SCCM, they > were reporting in, sending inventory, and getting software package > distribution. I was baffled. My searching found only a few way you could > assign a computer to a site, > https://technet.microsoft.com/en-us/library/gg682060.aspx. > 1. I know at imaging time (stand alone MDT) they use sitecode=auto. > 2. No one is going open the control panel and manually change it. > 3. All of the boundary groups have 'Use this boundary group for site > assignment checked'. > 4. Each of the 2 sites have 2 assigned Fallback DP's. These DP's do have a > couple of boundary groups assigned to them also. If a computer not in a > known boundary is randomly referred back to a Fallback DP, will it auto > assign to that site. And since I have 2 sites, does that mean site > assignment for these computers can be random? > > I had to do some walking around to other groups but finally think I > figured it out. Once upon a time they were in a boundary I have in SCCM. In > the past few months the network team has changed the DHCP scope there > twice. The first time to another boundary I had named for a different site > and the second time to the current boundary I did NOT have. Now it seems > that the person who set up this SCCM allows every device to use either use > Internet or Intranet if it picked up a PKI cert from GP. A look in the logs > showed that the computers were getting packages from *Intranet* > Fallback DP's but were getting policy from *Internet *bound MP's. My > goal, should I choose to accept it, is to find out how many more sites are > like this. > > So... > > I found a script that can find computers in the database that are in > subnets with no boundaries. That is how I found these. What I am trying > to do now is find boundaries that have No devices in them. You could do > that in 2007 using 'ProtectedSiteSystem_ARR'. That no longer exists in > 2012. Has anyone come up with a way to do that in 2012. In the mean time, > I am going to see if I can somehow reverse engineer this one. > > SELECT DISTINCT > v_R_System.Name0, > v_R_System.Client0, > v_RA_System_IPAddresses.IP_Addresses0, > v_RA_System_IPSubnets.IP_Subnets0, > v_RA_System_SMSAssignedSites.SMS_Assigned_Sites0 > FROM v_R_System > LEFT OUTER JOIN v_RA_System_IPSubnets ON v_R_System.ResourceID = > v_RA_System_IPSubnets.ResourceID > LEFT OUTER JOIN v_RA_System_IPAddresses ON v_R_System.ResourceID = > v_RA_System_IPAddresses.ResourceID > LEFT OUTER JOIN v_RA_System_SMSAssignedSites ON v_R_System.ResourceID = > v_RA_System_SMSAssignedSites.ResourceID > WHERE (v_RA_System_SMSAssignedSites.SMS_Assigned_Sites0 IS NULL) AND > (NOT (v_RA_System_IPAddresses.IP_Addresses0 IS NULL)) AND > (v_R_System.Client0 IS NULL) AND > (NOT (v_RA_System_IPSubnets.IP_Subnets0 IS NULL)) > order by v_RA_System_IPSubnets.IP_Subnets0 > > Thanks again, > Dave > > > > On Mon, Mar 16, 2015 at 3:59 PM, Merenda, Kenneth < > [email protected]> wrote: > >> Boundaries are for content distribution and (optionally) for site >> assignment. >> >> >> >> For content, if the client is outside the defined boundaries of the DP’s, >> it will go to a fallback DP, if available and if the content/deployment is >> configured to allow use of fallback. >> >> >> >> If you have multiple sites, the client should go to the site it is >> assigned to. >> >> >> >> *Kenneth Merenda* >> >> >> >> *From:* [email protected] [mailto: >> [email protected]] *On Behalf Of *David Jones >> *Sent:* Monday, March 16, 2015 12:49 PM >> *To:* [email protected] >> *Subject:* [mssms] Boundary Question >> >> >> >> If a boundary is not defined. Will computers that exist within undefined >> subnet/range still be managed? Will they just use any DP that is marked as >> fallback or does not have any boundaries assigned? If you have more than >> one site, how will they know which one they are assigned to? >> >> >> >> Dave >> >> >> >> >> >> > >
