If an ipNetwork should no longer be a member of a network group, you can remove the ipNetwork object.
Changes to the network configuration in the directory service, including changes to the internal and external network groups and their member ipNetwork objects, do not take effect until you perform a TPA reset to force the database to reload the network cache.