# 透過 SCOM 探索精靈安裝代理程式須開啟 [遠端系統管理]

最近花了些時間研究 SCOM 2007 R2 ( System Center Operation Manager )，在加入伺服器進行監控前都要透過「探索精靈」先將電腦加入到 SCOM 中，但偏偏有幾台主機就是無法成功加入監控，研究了一會兒才發現原來是防火牆沒有正確開啟導致，尤其是要透過 SCOM 遠端進行 **代理程式** (**Agent**) 安裝時更需要特別開啟遠端系統管理，否則將無法正確安裝成功。

首先，我們要先將即將被監控的主機開啟 \[具有進階安全性的 Windows 防火牆\] 介面 ( wf.msc )，並選取 \[輸入規則\] 然後找到三項 \[遠端系統管理\] 的項目，並進行啟用規則，如下圖示：

![](https://stwillblogassets.blob.core.windows.net/files/images/external/stwillblogassets.blob.core.windows.net/98fe5c3d838d8b14d698-image.png)

如果為了安全起見，你還可以修改這些啟用規則的 \[內容\] / \[進階\] 頁籤，並將 \[設定檔\] 的 \[私人\] 與 \[公用\] 取消選取，以避免不可預期的安全風險。( 例如短暫時間內脫離網域之類的 )

![](https://stwillblogassets.blob.core.windows.net/files/images/external/stwillblogassets.blob.core.windows.net/8365c10383205d0db156-image.png)

如果都設定正常，那麼在執行探索精靈時就會非常順利，以下是執行過程：

![](https://stwillblogassets.blob.core.windows.net/files/images/external/stwillblogassets.blob.core.windows.net/4c6d96d0cb999480891f-image.png)

![](https://stwillblogassets.blob.core.windows.net/files/images/external/stwillblogassets.blob.core.windows.net/7a4739b97e8f565cb7bc-image.png)

 ![](https://stwillblogassets.blob.core.windows.net/files/images/external/stwillblogassets.blob.core.windows.net/5f92cbcfa171ef0a602f-image.png)

![](https://stwillblogassets.blob.core.windows.net/files/images/external/stwillblogassets.blob.core.windows.net/d764afdabac18d4ad309-image.png)

![](https://stwillblogassets.blob.core.windows.net/files/images/external/stwillblogassets.blob.core.windows.net/8badd1a11e5dc5a24877-image.png)

![](https://stwillblogassets.blob.core.windows.net/files/images/external/stwillblogassets.blob.core.windows.net/3c2b6a9b68fbbadcd791-image.png)

![](https://stwillblogassets.blob.core.windows.net/files/images/external/stwillblogassets.blob.core.windows.net/5f42b6a3d7118cd218b5-image.png)

![](https://stwillblogassets.blob.core.windows.net/files/images/external/stwillblogassets.blob.core.windows.net/5be5977ce7ef541f687c-image.png)

![](https://stwillblogassets.blob.core.windows.net/files/images/external/stwillblogassets.blob.core.windows.net/c330ac2c3cac6d48d1c4-image.png)

**相關連結**

-   [Using a Firewall with Operations Manager 2007](http://technet.microsoft.com/en-us/library/cc540431.aspx) \[ TechNet \]
-   [搭配使用防火牆與 Operations Manager 2007](http://technet.microsoft.com/zh-tw/library/cc540431.aspx) \[ TechNet \]
-   [System Center Operations Manager Firewall Requirements](http://helpmemanage.blogspot.com/2007/10/system-center-operations-manager.html)
-   System Center Operations Manager Firewall Requirements
-   [Ports required for SCOM agent push-install](http://www.eggheadcafe.com/software/aspnet/33767240/ports-required-for-scom-a.aspx)
-   [SCOM Agent requirements and firewall ports](http://srvcore.wordpress.com/2010/01/04/scom-agent-firewall-ports-and-requirements/)