I believe what you would do is create a Boundary for the VPN (IP Range), associate that with a Boundary Group that is associated with a Distribution Group that contains only the DP's you want to pull content from. And then you'd probably un-check 'allow fallback source location for content.'
I have a small environment so this is my understanding. I'm sure an MVP will come in shortly and say I'm wrong ;-) There was a post a few days ago that touched on this subject where the OP wanted to block content pulling from any VPN client. On Fri, Dec 23, 2016 at 10:55 AM, Kevin Johnston < [email protected]> wrote: > Good question… I am not sure. This is a new VPN, and it was not something > I had to do before with our previous VPN solution.. > > > > Is this what most people have setup in SCCM for VPN clients? > > > > Kevin > > > > > > *From:* [email protected] [mailto:listsadmin@lists. > myitforum.com] *On Behalf Of *Adam Juelich > *Sent:* Friday, December 23, 2016 11:06 AM > *To:* [email protected] > *Subject:* [BULK] Re: [mssms] Client not using local DP when on VPN - > issues with downloading an appliccation > *Importance:* Low > > > > Wouldn't you set up a boundary for your VPN, assign that to the Boundaries > and Boundary Groups you want? > > > > On Fri, Dec 23, 2016 at 9:05 AM, Kevin Johnston < > [email protected]> wrote: > > I have a user in our Charlotte office that appears to be connecting to our > Canadian DP to download files, and on a particular application deployment I > am getting a > > > > Failed to open file c:\windows\ccmcache\b9\files\setup.exe with error > [32]. > > ContentAccess 12/23/2016 9:36:32 AM 9004 (0x232C) > > CheckExclusiveFileAccessAndSetFilePermissions failed for > c:\windows\ccmcache\b9\files\setup.exe ContentAccess > 12/23/2016 9:36:32 AM 9004 (0x232C) > > 敒敳䙴汩健牥業獳潩獮 failed; 0x80070020 ContentAccess 12/23/2016 9:36:32 > AM 9004 (0x232C) > > 慈桳潃瑮湥t failed; 0x80070020 ContentAccess 12/23/2016 > 9:36:32 AM 9004 (0x232C) > > 慈桳潃瑮湥t failed; 0x80070020 ContentAccess 12/23/2016 > 9:36:32 AM 9004 (0x232C) > > 潃灭瑵䍥湯整瑮慈桳 failed; 0x80070020 ContentAccess 12/23/2016 > 9:36:32 AM 9004 (0x232C) > > Failed to do hash verification with preference : 4. Try to verify at next > hash algorithm ContentAccess 12/23/2016 9:36:32 AM 9004 > (0x232C) > > > > Now when they connect to our VPN, they are actually going through our > Canadian office, so it seems to me that the client thinks it is in Canada > so the closes DP is the head office. > > > > Is there any way to have this forced differently for users in remote > locations? > > > > I know the answer seems obvious that if they are appearing to be in Canada > then it will look in Canada for the DP, but I just want to make sure this > seems like a legit and reasonable explanation as to why he (and likely many > others) will have issues trying to download applications and such while on > the VPN… > > > > I have read things about cache issues or space. I have removed everything > out of his cache, and when I see it try to download it copies some files > and then it just deletes them.. > > > > Kevin > > > > > > > >
