Windows Firewall Settings for SCCM Clients 2007


Client Push Installation

In order to successfully use client push to install the Configuration Manager 2007 client, you must add the following as exceptions to the Windows Firewall:
File and Printer Sharing 
Windows Management Instrumentation (WMI) 

Client Installation using Group Policy

In order to successfully use Group Policy to install the Configuration Manager 2007 client, you must add File and Printer Sharing as an exception to the Windows Firewall.

Client Requests

In order for client computers to communicate with Configuration Manager 2007 site systems, you must add the following as exceptions to the Windows Firewall:

TCP Port 80 (for HTTP communication)
TCP Port 443 (for HTTPS communication)

Network Access Protection

In order for client computers to successfully communicate with the system health validator point, you need to allow the following ports:
•UDP 67 and UDP 68 for DHCP
•TCP 80/443 for IPsec

Remote Control  

In order to use the remote tools features of Configuration Manager 2007, you need to allow the following ports:
•TCP port 2701
•TCP port 2702
•TCP port 135

Comments

Popular posts from this blog

ConfigMgr 2012+ Version Numbers

SCCM Software updates error WUAHandler.log errors

Steps to recreate WMI and Repair Corrupt WMI Services