Operations Manager 2007 R2 Installation and Configuration (step by step) – Part 4 “Configure GPO for SCOM”

In this post series I will go through detailed step by step (with screenshots) related to System Center Operations Manager 2007 R2 Installation and Configuration that IT Administrator or technical consultant will need to build Operations Manager 2007 R2,

In 1^st part here I started with “Pre-Build”,

In 2^nd part here I continued with “Installing Operations Manager Database”,

In 3^nd part here I continued with “Installing Root Management Server”,

And in this post I will continue with “Configure GPO for SCOM”,

Table below include step by step showing you how to Configure GPO for System Center Operations Manager 2007 R2:

Step	Description	Screenshot
	Log on as a Domain Administrator on a computer with Administrative Tools such as a Domain controller or your Administrative Workstation
1.	From Administrative Tools, Select Group Policy Management.
2.	Navigate down to Group Policy Objects, Right Click on Group Policy Objects and Select New from the popup menu.
3.	Provide a Name for the GPO and Click OK.
4.	Right Click on the newly created GPO and Select Edit from the popup menu.
5.	On the Group Policy Management Editor window, Expand the Computer Configuration tree and navigate to Windows Firewall as shown in the figure below and Click to highlight Domain Profile. Double Click on Allow inbound file and printer sharing exception.
6.	On Enabled and provide the IP addresses of the Root (and Secondary if there is any & separated by a comma “,”) Management Server, Then Click OK.
7.	On the Group Policy Management Editor window, Expand the Computer Configuration tree and navigate to Windows Firewall as shown in the figure below and Click to highlight Domain Profile. Double Click on Allow inbound remote administration exception.
8.	Click on Enabled and provide the IP addresses of the Root (and Secondary if any & separated by a comma “,”) Management Server, Then Click OK.
9.	On the Group Policy Management Editor window, Expand the Computer Configuration tree and navigate to Windows Firewall as shown in the figure below and Click to highlight Domain Profile. Double Click on Define inbound port exceptions.
10.	Click on Enabled and Click on Show to define the port extensions. On the Show Contents dialog box, click Add.
11.	On the Add Item dialog box, do the following: · Enter the following text: 5723:TCP:#.#.#.#:enabled:SCOMAgent · Click OK. Note: IP Addresses should be the IP Addresses of Management Servers.
12.	On the Show Contents dialog box, Click OK.
13.	Click OK and close the GPO Editor.