Dear,If I choose client deployment by "client push" and deploy prerequisites with gpo (Admin$, Firewall exception for File and Print sharing, BITS service, Add admin local for pushed account). After done with this deployment method and don't need to deploy again. With following environment,- SCCM features use only hardware and software inventory and software update.- Client are XP, Vista, and Win7Can I disabled the prerequitsite requirement that i deploy via GPO, or need to enabled some?If client are Vista or Win7 and enabled client-mode firewall for discard all connection with no exception. Are they still communicate with SCCM server.Thank in advance Thana

Hi Thana,Those features will work with the firewall turned back on.Kent Agerlund | http://scug.dk/members/Agerlund/default.aspx | The Danish community for System Center products

Hi Thana, For firewall setting on the client, see this article: Firewall Settings for Configuration Manager Clients http://technet.microsoft.com/en-us/library/bb694088.aspx

Hi Eric Zhang,Thank you all for you kindly.Mention to following , means i need to allow two way communication or just from client to sccm Client RequestsIn order for client computers to communicate with Configuration Manager 2007 site systems, you must add the following as exceptions to the Windows Firewall:TCP Port 80 (for HTTP communication)TCP Port 443 (for HTTPS communication)Thana