SCCM Client Push install issue with WMI and RPC
If you see this error in your CCM log when trying to install clients
CWmi::Connect(): ConnectServer(Namespace) failed. – 0x800706ba
It is because the SCCM Client uses Dynamic RPC connections for WMI communications and can cause problems when a firewall is in place between the clients and the servers. This scenario is not documented in the Client install firewall doc.
The document is talking about using the windows firewall on the client and not a WAN firewall located between the SCCM server and the SCCM Clients.
http://technet.microsoft.com/en-us/library/bb694088.aspx
The Document states:
Client Push Installation
In order to successfully use client push to install the Configuration Manager 2007 client, you must add the following as exceptions to the Windows Firewall:
-
File and Printer Sharing
-
Windows Management Instrumentation (WMI)
but it doesn’t say what ports are required for the WMI Communications.
Here is info I was provided:
***************************
ISSUE: Unable to deploy SCCM client to systems across firewall via client push
CAUSE: RPC Ports not open on firewalls
SOLUTION: You opened the port range above 1024 -5000 to allow for installation of the client.
***************************
This issue has been submitted to Microsoft with a request to have the documentation updated to include what ports are needed for WMI and RPC communications when using WAN Firewalls.