Many people have had troubles installing the DPM Agent 2010 to Windows 2008 Server machines because the firewall blocks the install.  Typically you will see error 319.

The easy answer is of course to shut off the firewall do the install and turn it back on.  This is fine if you have a couple of servers, but when you have several hundred this is just not feasible.

At this point most people find the Microsoft Article http://technet.microsoft.com/en-us/library/ff399062.aspx telling you what ports needs to be open on the DPM server.  That’s not our problem.  Our problem is the client firewall is blocking the install of the DPM Agent Coordinator.

The easiest way to fix this is to create a GPO that pushes out the firewall rules we need.

Create a New Inbound Rule

Choose Program

In the program path copy and paste this: %SystemRoot%\Microsoft Data Protection Manager\DPM\ProtectionAgents\AC\3.0.7696.0\dpmac.exe

(be aware the version number may change.  The easiest way to check the version number is to look at your DPM server (C:\Program Files\Microsoft DPM\DPM\ProtectionAgents\AC\version number will be here\)

You cant browse for it because it doesn’t exist yet.  The process of pushing the agent out will install this.  We are allowing it through the firewall to be installed.

Allow the connection

Check the boxes appropriate to your environment

Give it a name and a description and click Finish

Make sure apply this GPO properly and your installs should go smoothly from here.