Hi: We recently deployed a number of virtual servers, running Windows 2008 R2, with the firewall service is disabled. In order to successfully install the SCCM client on the servers we have to manually enable the firewall service, install the client, and then disable it. Our security officer requested that we disable the firewall service entirely to keep it from conflicting with the Symantec Endpoint Protection software running on all of our servers for antivirus protection, so ideally I'd like to find a way to be able to install the client *without* enabling the firewall. This only happens on our R2 servers. Thanks, Molly

I don't think, you need to manually enable the firewall for installing the client on the win2k8 r2 server. See, more details Windows Firewall Settings for Configuration Manager ClientsAnoop C Nair - Twitter @anoopmannur MY BLOG: http://anoopmannur.wordpress.com SCCM Professionals This posting is provided AS-IS with no warranties/guarantees and confers no rights.

If on the server system firewall is disabled means it is allowing everything.. that means You can install the Client... I suspect that Since you have a Symantec Endpoint Protection make sure that there should not be any rule that blocking the incoming SMB. on the above given (by Anoop posted link) Ports.This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, It's not recommanded to stop windows firewall service on client machines because it will cause some troubles (as you've described) and you can lost communication. If you don't need to use it on your machines, so just let the service running and disable the firewall with Advanced Security console or from a command prompt http://technet.microsoft.com/en-us/library/cc766337(WS.10).aspx or by GPO also.Bechir Gharbi | http://myitforum.com/myitforumwp/members/bgharbi/ | Time zone : GMT+1

I don't think, you need to manually enable the firewall for installing the client on the win2k8 r2 server. See, more details Windows Firewall Settings for Configuration Manager ClientsAnoop C Nair - Twitter @anoopmannur MY BLOG: http://anoopmannur.wordpress.com SCCM Professionals This posting is provided AS-IS with no warranties/guarantees and confers no rights.

If on the server system firewall is disabled means it is allowing everything.. that means You can install the Client... I suspect that Since you have a Symantec Endpoint Protection make sure that there should not be any rule that blocking the incoming SMB. on the above given (by Anoop posted link) Ports.This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Are you using the firewall installed with Symantec Endpoint Protection and Windows firewall together? That practice is not recommended. Make sure you are following the best practice for installing Symantec Endpoint Protection on Servers. http://www.symantec.com/business/support/index?page=content&id=TECH92440&locale=en_US