You have a System Center 2012 Configuration Manager environment. You need to prevent computers in remote offices from installing packages from the distribution point in the main office. What should yo

In ConfigMgr 2012, a distribution point configured with protected boundaries will only serve clients that fall within the defined boundary set. By assigning protected boundaries to the central (main office) site system role that include only the main office network ranges, remote office clients are explicitly excluded from using that distribution point as a content source.

Configuring remote office site system roles with protected boundaries would restrict which clients use the remote DPs, but would not prevent those same remote clients from reaching back to the central office DP.

Marking the central DP as a protected distribution point without specifying the correct associated boundaries does not by itself restrict access - the boundaries define which clients are allowed, so the boundary configuration is the critical step.

Configuring remote office DPs as protected ensures remote clients prefer local DPs but does not block remote clients from falling back to the unprotected central DP when needed.