How to Find and FIX Overlapping SCCM ConfigMgr Site Boundaries Issues

How to Find and FIX Overlapping SCCM ConfigMgr Site Boundaries Issues. More discussions (heated :)) about Configmgr Boundaries happened recently. More details ConfigMgr SCCM Boundaries Which Is Better IP Ranges Or Subnet Endpoint Manager HTMD Blog (anoopcnair.com).

How to Find and FIX Overlapping SCCM ConfigMgr Site Boundaries Issues

Overlapping Site Boundaries are a big headache for SCCM admins (most of you agree with me ). I always prefer to have IP ranges instead of IP subnets and AD sites as SCCM boundaries.

Latest Post ConfigMgr Reports Power Management | Default | SCCM HTMD Blog (anoopcnair.com)

How to resolve overlapping boundary issues in SCCM ConfigMgr environment

Here are some tips to find out the overlapping site boundaries through the Active Directory (AD) custom LDAP query. I know there are a lot of blogs around and the scripts to find out overlapping boundaries (some of them are noted down in the reference section at the end of this blog).

1. Open Active Directory console.

2. Goto “Saved Queries” – “New” – “Query”. This will open up the “New Query” window.

3. On “New Query” – Enter the new query name as “Overlapping Boundaries” (or whatever you prefer). and click on “Define Query”.

4. Select “CUSTOM Search” in the “Find Custom Search” window. Then go to the “Advanced” tab.

5. Use the below-mentioned LDAP query (to find out the IP subnets associated with SCCM sites in the hierarchy). Replace the variable values of “Enter The IP Subnet” with actual IP Subnet (e.g 10.163.24.0) and “AD Site” with the actual AD site name (e.g KPS – don’t use quotes ) and click OK.

(&(ObjectCategory=mSSMSSite)(|(mSSMSRoamingBoundaries=ENTER IP SUBNET)(mSSMSRoamingBoundaries=ENTER AD SITE Name)))

6. Click on the “Overlapping Boundaries” query and on the right-hand side panel you can see the result.

7. If your query result is having only one ‘sccm site’ – AD object (“SMS-Site-567” where “567” is your SCCM site code) then you don’t have any overlapping boundary issue for that particular IP subnet with respect to the AD site.

If you see more than one SCCM site AD Object in the result then yes, you have overlapping of boundaries and you need to do some work to remove this overlapping. 🙂

Note: This method would be helpful if you are using the AD Site as boundary.

References

11 Days Of Free Intune Training Course By HTMD Community – HTMD Blog #2 (howtomanagedevices.com)

Planning Configuration Manager Boundaries

Author

Anoop is Microsoft MVP! He is a Solution Architect in enterprise client management with more than 20 years of experience (calculation done in 2021) in IT. He is a blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. E writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc…