ConfigMgr Create Task Sequence Media Wizard and Network Ports

Overview

This post describes the firewall ports that need to be opened between a Microsoft Configuration Manager console and servers in order to use the Create Task Sequence Media wizard. I recently had to run the Create Task Sequence Media wizard from a ConfigMgr console installed in a secure environment. All the network ports as documented by Microsoft were open but the wizard didn’t work. This post describes the requirements of the process in more detail and shows the network ports that were missing from the Microsoft documentation.

Create Media Wizard Requirements

The official list of ports used by the ConfigMgr console are listed at https://learn.microsoft.com/en-us/intune/configmgr/core/plan-design/hierarchy/ports. However, this list only covers the basic ConfigMgr console operations and does not cover the Create Task Sequence Media process.

During the media creation process the console allows the choice of various Distribution Points (DPs) in order to download the content required for the specified task sequence. An SMB connection is made to the DP’s ContentLib$ network share. All content is downloaded from the DP via SMB and not http/https as might be expected. All other console requirements (RPC) are as documented by Microsoft.

Create Media Wizard Firewall Port List

The table below shows the full list of firewall ports that need to be opened between the ConfigMgr console and the various ConfigMgr server systems in order to run the Create Task Sequence Media wizard. The RPC connections to the SMS provider system would be to the primary Site Server or CAS.

Related Content

ConfigMgr Package Success, Reboot and Retry Return Codes Script to Detect if Running from ConfigMgr Task Sequence and Avoid False Positives ConfigMgr Package and Program Return Codes and Reboot Behaviour Create a Windows 7 BitLocker Partition in ConfigMgr