.png?width=100&auto=webp&quality=80&disable=upscale "Picture of John Savill")
.png?width=400&auto=webp&quality=80&disable=upscale "John Savill")
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
Q. How can I enable the firewall exceptions for deploying the System Center Configuration Manager (SCCM) 2007 client using Group Policy?
John Savill
February 26, 2011
1 Min Read
A. To deploy the SCCM 2007 client by pushing the client from SCCM, you need the File and Printer Sharing and Windows Management Instrumentation (WMI) firewall exceptions on the clients. Additionally, clients need HTTP/HTTPS exceptions for communication to the SCCM site systems and TCP ports 2701, 2702, and 135 for remote control. Microsoft has a full list available.
The easiest way to create these exceptions is to define a Group Policy Object (GPO), as I'll describe here.
Create a new GPO.
Navigate to Computer Configuration, Policies, Windows Settings, Security Settings, Windows Firewall with Advanced Security, Windows Firewall with Advanced Security , Inbound Rules.
Select New Rule.
Select Predefined then File and Printer Sharing and then click Next.
Select all the rules and click Next.
Select Allow the connection then click Finish
Repeat the above steps for WMI, World Wide Web Services (HTTP Traffic-In), and World Wide Web Services (HTTPS Traffic-In).
For remote control, you need to create a Port rule specifying protocol type TCP and ports 2701, 2702, and 135.
Apply this GPO to your SCCM client computers. Once group policy has refreshed, you should be able to push the SCCM client (providing you've correctly configured SCCM).
About the Author
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
