System Center 2012 R2 CM系列之配置configuration manager防火墙设置

川长思鸟来 2022-02-03 07:57 164阅读 0赞

为了能够正常推送Configuration Manager 2012 R2客户端，必须添加防火墙例外设置，主要包括以下两个：A:**文件和打印共享**；B: **Windows Management Instrumentation (WMI)**

1. 打开并登录“BJ-DC-01”服务器，点击工具，打开组策略管理器

2. 右键相关域，点击创建“在这个域中创建GPO并在此处链接”

[![clip\_image002][clip_image002]][clip_image002_clip_image002]

3. 新建GPO对话框中输入相应的GPO名称

[![clip\_image003][clip_image003]][clip_image003_clip_image003]

4. 右键新创建的PGO，点击编辑，并打开组策略管理编辑器

[![clip\_image005][clip_image005]][clip_image005_clip_image005]

5. 点击计算机配置，点击策略，点击windows设置，安全设置，高级安全windows防火墙

6. 点击入站规则，右键新建规则

[![clip\_image007][clip_image007]][clip_image007_clip_image007]

7. 新建入站规则向导中选择预定义，选择文件和打印机共享，点击下一步

[![clip\_image009][clip_image009]][clip_image009_clip_image009]

8. 预定义规则中不做任何更改，点击下一步

[![clip\_image011][clip_image011]][clip_image011_clip_image011]

9. 选择允许连接，点击完成

[![clip\_image013][clip_image013]][clip_image013_clip_image013]

10. 查看已创建的入站规则

[![clip\_image015][clip_image015]][clip_image015_clip_image015]

11. 点击出站规则，并新建出站规则

12. 预定义处选择文件和打印机共享，点击下一步

[![clip\_image017][clip_image017]][clip_image017_clip_image017]

13. 操作处，选择允许连接

[![clip\_image019][clip_image019]][clip_image019_clip_image019]

14. 右键入站规则，选择新建规则

15. 预定义处选择WMI，点击下一步

[![clip\_image021][clip_image021]][clip_image021_clip_image021]

16. 保持默认设置点击完成

[![clip\_image023][clip_image023]][clip_image023_clip_image023]

Configuration Manager不支持SQL 动态端口，默认情况下需要开放1433和4022端口在防火墙中，与SQL Server实例进行数据连接的Configuration Manager站点系统角色包括：Application Catalog web service point、Certificate registration point role、Enrollment point role、Management point、Site server、Reporting services point、SMS Provider、SQL Server to SQL Server

17. 打开组策略管理器

18. 新建GPO

[![clip\_image025][clip_image025]][clip_image025_clip_image025]

19. 右键新建的GPO，点击创建

20. 右键入站规则，点击新建规则

[![clip\_image027][clip_image027]][clip_image027_clip_image027]

21. 选择TCP，在特定本地端口中输入1433端口号

[![clip\_image029][clip_image029]][clip_image029_clip_image029]

22. 点击允许连接，点击下一步

[![clip\_image031][clip_image031]][clip_image031_clip_image031]

23. 何时应用该规则处，勾选全部，域、专用、公用

[![clip\_image033][clip_image033]][clip_image033_clip_image033]

24. 确定规则名称，点击完成

[![clip\_image035][clip_image035]][clip_image035_clip_image035]

25. 重复上述步骤，新建4022端口入站规则

[![clip\_image037][clip_image037]][clip_image037_clip_image037]

26. 规则名称输入规则名称，点击完成

[![clip\_image039][clip_image039]][clip_image039_clip_image039]

27. 返回查看创建的SQL端口入站规则

[![clip\_image041][clip_image041]][clip_image041_clip_image041]

在域控制器以及域成员服务器上使用gpupdate /force命令行更新组策略

[![clip\_image043][clip_image043]][clip_image043_clip_image043]

键入rsop.msc将会显示设置的组策略结果，等待命令加载完成后点击管理模板，点击特别的注册表设置，你将能看见已创建的策略

[![clip\_image045][clip_image045]][clip_image045_clip_image045]

本文转自 徐庭 51CTO博客，原文链接：http://blog.51cto.com/ericxuting/1429386，如需转载请自行联系原作者

[clip_image002]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359434HNY8.jpg
[clip_image002_clip_image002]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_14033594343wVa.jpg
[clip_image003]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359434VHOu.png
[clip_image003_clip_image003]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359434Ecdc.png
[clip_image005]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359435DEVZ.jpg
[clip_image005_clip_image005]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359435BShu.jpg
[clip_image007]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_14033594357wDG.jpg
[clip_image007_clip_image007]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359435UByZ.jpg
[clip_image009]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359435EEpD.jpg
[clip_image009_clip_image009]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359435sYUI.jpg
[clip_image011]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359435eMNN.jpg
[clip_image011_clip_image011]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359435aqay.jpg
[clip_image013]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359435xUYD.jpg
[clip_image013_clip_image013]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359435ghUz.jpg
[clip_image015]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359435SQEu.jpg
[clip_image015_clip_image015]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359435gQq0.jpg
[clip_image017]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359436Jo5P.jpg
[clip_image017_clip_image017]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_14033594355E88.jpg
[clip_image019]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359436vDY7.jpg
[clip_image019_clip_image019]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_14033594362jAQ.jpg
[clip_image021]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359437bLVc.jpg
[clip_image021_clip_image021]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359437p65P.jpg
[clip_image023]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359440V9b2.jpg
[clip_image023_clip_image023]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359437Tq3S.jpg
[clip_image025]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359440QjMS.jpg
[clip_image025_clip_image025]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359440SOza.jpg
[clip_image027]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359440VFPX.jpg
[clip_image027_clip_image027]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359440RGJr.jpg
[clip_image029]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_14033594402zXG.jpg
[clip_image029_clip_image029]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359440xNP3.jpg
[clip_image031]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359440fNxU.jpg
[clip_image031_clip_image031]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359440QiSD.jpg
[clip_image033]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359441QTyK.jpg
[clip_image033_clip_image033]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359441avbR.jpg
[clip_image035]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359441c98d.jpg
[clip_image035_clip_image035]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_14033594411CAS.jpg
[clip_image037]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359441Jgw6.jpg
[clip_image037_clip_image037]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359441ct87.jpg
[clip_image039]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359441KF3V.jpg
[clip_image039_clip_image039]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_14033594415AlU.jpg
[clip_image041]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359441Wb47.jpg
[clip_image041_clip_image041]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359441xBXC.jpg
[clip_image043]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359442zq6t.jpg
[clip_image043_clip_image043]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359442K503.jpg
[clip_image045]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359442rinj.jpg
[clip_image045_clip_image045]: http://ericxuting.blog.51cto.com/attachment/201406/21/8995534_1403359442Cs54.jpg