Can't install SCCM client on some computers

[blin]

We are running SCCM 2007 on Windows 2008 R2. We have about 600 computers in windows 2008 domain, 80% are XP and 20% are Windows 7. We can push SCCM client installation on 90% workstations without any problems. We can’t push the installation to other 10% and most these computers are windows 7. We find the problem is firewall. Or if we disable the firewall on the client, the SCCM client will be installed automatically. We setup Domain Group Policy to enable firewall on all computers. The question is why we can install sccm client on most computers but others. We don't want to disable the firewall and go to each workstation to install the SCCM client. What's the solution for this case?

[blin]

How to troubleshoot Advanced Client Push Installation issues in Systems Management Server 2003 and System Center Configuration Manager 2007: http://support.microsoft.com/kb/925282
--------------------------------------------------------------------------------

[blin]

I would recommend that you use a Startup script in a GPO instead to depoy the SCCM client, then you don't have to care about the Windows Firewall settings e.tc.

Jason Sandys has written a great! startup script that you can find here: http://blogs.catapultsystems.com/jsandy ... cript.aspx

[blin]

Just open ICMP (Ping) on windows firewall and the SCCM client will install smoothly.
--------------------------------------------------------------------------------

[blin]

I might give incorrect information and it might not be firewall issue. It is name resolution issue. ZafarZohaib's "opne ICMP" gives me tip to figure it out. Please refer to this post: viewtopic.php?f=3&t=16242