SCCM unable to connect to clients

[beck4164]

Hello All, we are currently in the process of deploying SCCM 2007 R2 in our environment. However we our running into a problem were we are unable to access the computer using remote tools or deploy the SCCM client to the computer. It works fine when we disable the firewall but when we turn it back on it blocks anything coming from SCCM. Below is the exceptions i have added to the clients firewalls but still it wont work with the exceptions. Any ideas?

 

67:TCP:10.1.121.150:enabled:SMSPXEDHCP

68:TCP:10.1.121.150:enabled:SMSPXEDHCP

69:TCP:10.1.121.150:enabled:SMSPXETFTP

4011:TCP:10.1.121.150:enabled:SMSPXEBINL

445:TCP:10.1.121.150:enabled:SMSSMB

80:TCP:10.1.121.150:enabled:SMSHTTP

443:TCP:10.1.121.150:enabled:SMSHTTPS

2701:TCP:10.1.121.150:enabled:SMSRemoteControl

2701:UPD:10.1.121.150:enabled:SMSRemoteControl

2702:TCP:10.1.121.150:enabled:SMSRemoteData

2702:UPD:10.1.121.150:enabled:SMSRemoteData

135:TCP:10.1.121.150:enabled:SMSRemoteEndpoint

3389:TCP:10.1.121.150:enabled:SMSRDP

9:UPD:10.1.121.150:enabled:SMSWAKEONLAN

139:TCP:10.1.121.150:enabled:SMSSession

1433:TCP:10.1.121.150:enabled:SMSSQL

[Peter van der Woude]

You still need to open the Dynamic RPC Ports, also take a look at this post: http://www.petervanderwoude.nl/post/ConfigMgr-Client-Push-Installation-and-(a)-Firewall(s).aspx

[Eswar Koneti]

another post here for adding the port numbers in firewall exceptions in taking remote control http://eskonr.wordpress.com/2009/07/20/how-to-allow-smssccm-to-take-remote-control-though-firewall-in-on/

 

 

[shankar.raju.d@gmail.com]

This is very helpful, thanks for it.

 

Also could any one help on how to do this config for all the clients from server end?

[Peter van der Woude]

You mean setting the firewall exceptions? If so, use GPO's.