Share via

Clients going to the wrong Management Point

Mario A. Hernandez 171 Reputation points
2021-02-26T06:09:19.17+00:00

I have 45 sites in my environment. I am running SCCM CU 2010. I have about 55k clients in all. I have a remote site that is dedicated for OSD only. I don't see a good reason for them to come across the WAN to get to a management point, distribution point, etc. At their site, I gave them an MP and DP. However, when I image a new computer, clients are still coming across the wire to connect to a remote MP. I created a boundary group and I only placed the remote site in this boundary group. Also, I have made sure that this remote site boundary is not in any boundary groups. Any ideas?

Thanks.

Microsoft Security | Intune | Configuration Manager | Deployment
Microsoft Security | Intune | Configuration Manager | Other
0 comments

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jason Sandys 31,421 Reputation points Microsoft Employee Moderator
    2021-02-26T15:56:21.123+00:00

    Can you please clarify your hierarchy?

    You say you have 45 sites. Does that mean you have 45 secondary sites or are you using "site" generically to mean location?

    You also noted "At their site, I gave them an MP and DP." Adding an MP or DP is not optional with a secondary site so clarification is definitely needed here.

    Note that if you are in fact using secondary sites, that clients within the scope a secondary site still use and are assigned to an MP within the primary site. This is because MPs at secondary sites aren't full MPs and few smaller and very sporadic operations must still be handled by MPs within the primary site. This includes initial client registration.

    So the additional question here is what exactly is leading you down the path of this question? I'm not saying it's not a valid question in any way, but when you say "clients are still coming across the wire to connect to a remote MP" that's a generic description that and not a technical one so it's difficult to explain a behavior at a technical level when we don;t have a technical description of exactly what you are seeing.

    +1 the others comments as well.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Youssef Saad 3,416 Reputation points
    2021-02-26T12:54:25.877+00:00

    Agree with @KONETI ESWARARAJU and @Garth Jones .

    If you are using AD site boundaries, it's recommended to remove them and use IP address range for large enterprises.

    Regards,

    Youssef Saad | New blog: https://youssef-saad.blogspot.com
    Please remember to ** “Accept answer” ** or upvote for useful answers, thank you!

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  3. Garth Jones 2,076 Reputation points
    2021-02-26T07:50:14.683+00:00

    Exactly what type of boundaries are you using ? Ip ranges only i hope.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  4. KONETI ESWARARAJU 2,206 Reputation points MVP Volunteer Moderator
    2021-02-26T07:12:34.51+00:00

    check the boundary groups for the specific device from the console, that should help you to find more
    https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/changes/whats-new-in-version-2002#show-boundary-groups-for-devices

    Thanks,
    Eswar

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.