A. You need several ports open on the clients for SCCM to be able to remotely connect from the SCCM Management Console. The ports and exception rules needed are:
- Remote Assistance
- Remote Desktop
- TCP Port 135 (RPC)
- TCP Ports 2701-2702
The best way to enable these exceptions is using Group Policy for the domain-joined machines.