I have a Software update deployment that I have setup to not download if a client is on a slow boundary or if they aren't available on any preferred DP and then I have "If software updates are not available on preferred distribution point or remote distribution point, download content from Microsoft Updates. "checked. So one deployment this worked fine and my VPN user downloaded from MS for the updates, which is what I want because my VPN address range is marked for a slow boundary. However, one of our DP sites is in a boundary that matches most home Linksys routers (192.168.1). So the client tried getting it's content from there and for some reason it never would download. So I removed the content from that DP and now locationservices.log is showing "Calling back with empty distribution points list". I know this works because another client without the 192.168.1 home router address downloaded it's updates from Microsoft while on VPN.