none
SCCM Distribution Point Selection or Force....

    Question

  • Hello All,

    Our environment has one SCCM 2007 R2 server in the main office and we have one branch office with almost 80 users.

    We have configured Active Directory Site (Not Subnets) as a Boundary in SCCM Since we have only one AD Site.

    To avoid network bandwith issues when deploying packages, we have configure on server as Standard Distribution Point at Branch Office. 

    I create a new package and at the selection of distritubion points - I can see both Dist Points - So I choose both.  then the package has been copied to the both Distribution Points...

    The main issues is....   When I create the Advertisement to deploy the package to only Branch Office users..   as per my understanding they should get the package from local dist point..  but its not happening.. when I check the logs on the Branch office clients, they are downloading package from Main Office Distribution point..

    Is there any way so I can define for Branch Office users to contact the local Dist Point not the Main Office Dist Point.

    All suggestions are highly welcome.....

    Thanks in advance

    ABUL.


    Tuesday, February 23, 2010 11:30 PM

Answers

  • Use a protected DP: http://technet.microsoft.com/en-us/library/bb932133.aspx. These are scoped on ConfigMgr site boundaries though so you will have to either add the IP ranges for your network as boundaries (I don't recommend subnets for a variety of reasons) or break your AD Site up.

    If you have a branch office, why don't you already have an AD site for it?

    Jason | http://myitforum.com/cs2/blogs/jsandys | http://blogs.catapultsystems.com/jsandys/default.aspx | Twitter @JasonSandys
    Wednesday, February 24, 2010 12:37 AM

All replies

  • Use a protected DP: http://technet.microsoft.com/en-us/library/bb932133.aspx. These are scoped on ConfigMgr site boundaries though so you will have to either add the IP ranges for your network as boundaries (I don't recommend subnets for a variety of reasons) or break your AD Site up.

    If you have a branch office, why don't you already have an AD site for it?

    Jason | http://myitforum.com/cs2/blogs/jsandys | http://blogs.catapultsystems.com/jsandys/default.aspx | Twitter @JasonSandys
    Wednesday, February 24, 2010 12:37 AM
  • Hi Jason,

    Thanks for your advice,

    But in my scenario  Yes we do have one Branch office but we don't have any Domain Controller.  Thats the reason we don't consider BR office as a site.  And I am sure our management will not allow us to just creat one AD Site for SCCM DP reason.

    In this scenarion please suggest me how can I protect my Dist Point, Actually we are planning to define the Site Boundaries with IP Subnet as a Protected Dist Point Assigned to each Subnet.

    Does this configuration works fine and support..???? If not what are the limitations or issues we will face if we implement IP Subnet Boundaries.

    Waiting for your valuable suggestions..

    Thanks

    ABUL

    Wednesday, February 24, 2010 8:29 AM
  • Yes, this works fine and it is supported :)
    This page descibes how protected DPs work: http://technet.microsoft.com/en-us/library/bb892788.aspx
    Jasons link above tells you how to configure it.
    When it comes to the boundaries, since you only have one site, you can leave the AD site as a boundary, but you have to add the subnet or range that you use at the branch office. Use this subnet/range when you protect your DP as described above.

    Wednesday, February 24, 2010 8:58 AM
  • Note that it is a fallacy that you need a DC to have an AD site or that things will "break" if you have a site without a DC. Sites in AD are about more than just DC location/selection and enable other site aware services like DFS and ConfigMgr.
    Jason | http://myitforum.com/cs2/blogs/jsandys | http://blogs.catapultsystems.com/jsandys/default.aspx | Twitter @JasonSandys
    Wednesday, February 24, 2010 2:16 PM