Allow SMS 2003 through XP Windows Firewall

[petebuk]

Hello,

 

I am trying to turn on XP SP3 Windows Firewall in our environment and am having trouble allowing SMS 2003 through using a GPO. Below is what I have so far and I keep receiving an error from SMS stating it cannot ping the computer I am testing with. I have allow local exceptions disabled as our users are local admins. Any ideas?

 

 

Port Exceptions:

 

TCP

80

443

135

139

445

 

UDP

137

138

67

68

 

Program exception:

C:\Windows\System32\CCM\SMSCliUI.exe:*:Enabled:SMS

[Peter van der Woude]

Pinging a computer has nothing to do with SMS or SCCM... so you won't find the needed ports for that in the documentation... to allow ping in the Windows Firewall you need to allow ICMP.

[petebuk]

ICMP is enabled see attached:

[petebuk]

I resolved the issue.

 

We needed to open TCP port 2701 to allow SMS Chat / Ping. I also needed to create a program exception for unsecapp.exe