Problem downloading updates software update deployment(SCCM and ADR) specfiy Windows 11 build 25 H2

[keywan]

I'm in the process of deploying windows updates to Windows Clients (Windows 11 build 25H2) Windows servers(2019,2022,2025) in my environment with SCCM and ADRs and most of the client computers have installed updates just fine however around 50 or so client computers are not installing updates and the updates are not getting downloaded. When I click to install updates it just stays stuck at 0% downloading and never installs until eventually it times out

My Boundary and Boundary Groups

the updates have been distributed to the DP servers. The boundaries are configured to include the clients in the scope. All of my boundary groups are set up with the Active Directory site only.

We have the following IP Range

192.168.0.0, 172.20.0.0, 172.10.0.0. 172.40.0.0

But I set my My Boundary and Boundary Groups with the Active Directory site only.

Is that the my issue?

Should/Could I create or add some new Boundary with IP address Range(what we have see above IP Range) additionally to my Active Directory site?

Could you please help me?

Regards

[anyweb]

from Copilot.


1. Add IP Range Boundaries

Yes — you should absolutely create IP Range boundaries for each of your ranges.

Example:

Boundary Type	Range
IP Range	192.168.0.1 – 192.168.0.254
IP Range	172.20.0.1 – 172.20.0.254
IP Range	172.10.0.1 – 172.10.0.254
IP Range	172.40.0.1 – 172.40.0.254

👉 Adjust ranges appropriately to your subnet masks.

---

✔️ 2. Add them to the correct Boundary Groups

• Put all new IP range boundaries into your existing boundary groups
• Ensure each boundary group:
  • ✅ Has a DP assigned
  • ✅ Has site assignment enabled (if needed)

---

✔️ 3. Leave AD Site boundaries (optional)

You can keep them, but:

👉 Best practice:

• Use IP range boundaries as primary
• Use AD Site boundaries only if you trust their accuracy

[keywan]

Hi Anyweb,

First question

What do you mean with best practice?

Use IP range boundaries as primary

Do you mean I have to change from Active Directory site to IP RANGE? Can I edit the Active Directory site to to IP RANGE?

 

I created 4 new Boundary with IP Range and add them to the existing Boundary Group( I have only one), Now my Boundary Group show me 4 Members.

My default Boundary was  Active Directory site and I added 3 new IP RANGE Boundary

 

and the "References"

Is there any more steps I have to do?