I have a Config mgr install with 2007 SP2 and R2 installed and things seem fine, but I'm getting a a fair number (about 10%) compliance state unknown responses in my reports. I was wondering if I have boundaries set correctly. I only have one site at the moment, and plan to add child sites in the future. I originally used IP ranges, since we supernet our LAN and I didn't want to put in individual subnets each time, but then a co-worker added the subnets boundary types for each site, so I tried to stick to one type. The question I have is this: The subnet boundaries only contain the subnet ID, no IP or subnet mask. Is this OK? It seems weird to me. If it isn't right, and since we have 70 plus subnets to work with, wouldn't it be easier to have one IP range for those sites where we have multiple subnets? For example we have one building that uses supernetting for xxx.xxx.10.xxx to xxx.xxx.101.xxx, whether the first two octets are identical numbers, and each floor has two subnets. Now it has 20 subnet boundaries, instead of one range. The other question I have is, IP range boundaries do show in AD but the subnet ones don't. Is this due to the IP subnet boundaries not being correctly filled in or is something else going on? Thanks in advance!

Supernets are not supported. See: http://blogs.technet.com/b/configurationmgr/archive/2010/03/22/clarification-on-issues-resulting-from-the-use-of-supernets-in-configmgr-2007.aspx.

OK that's what I'd seen before, which is why subnets are input individually say 10.0 and 11.0, for each floor with two subnets. I guess my question remains: how should the subnet boundary type be filled in? Should I pretend there's a non supernetted subnet mask of 255.255.255.0 instead of the actual 255.255.254 for those entries? If I put in an IP and and a subnet mask, let it auto-fill the subnet ID, will it then publish to AD as IP ranges do? Can I, for expediency's sake, just populate an IP range?

I use ranges for simplicity. John Marcum | http://myitforum.com/cs2/blogs/jmarcum |

So it shouldn't be an issue to have something like 192.168.10.1 192.168.101.255? That still leaves me with 50 subnet ID entries I need to correct or convert to IP ranges, but that will be less work than editing each subnet I guess. Thanks again!

that's correct, when using a range you can add as many as you'd like into one boundary. John Marcum | http://myitforum.com/cs2/blogs/jmarcum |