Roger Zander at myITforum.com

SCCM Client Center Event Monitoring through Windows Firewall

There is a great article on MSDN on how to allow asynchronous WMI calls through a Windows Firewall: <http://msdn.microsoft.com/en-us/library/aa389286(VS.85).aspx>

Client Center does require asynchronous WMI connections for Event/Process Monitoring actions. It’s important that the callback function is configured correctly on the Firewall otherwise you may get an Error like “RPC Server Unavailable” (0x800706ba) if you enable Event Monitoring…

A summary of the required Actions to open the Firewall on the Admin PC (where Client Center is installed):

1. netsh firewall set service RemoteAdmin enable
2. netsh firewall add portopening protocol=tcp port=135 name=DCOM_TCP135
3. netsh firewall add allowedprogram program=%windir%\system32\wbem\unsecapp.exe name=UNSECAPP

All target Clients do require the following setting:

1. netsh firewall set service RemoteAdmin enable