Sometimes, I run into a machine at work that refuses to let me connect with SCCM. Some policy is likely responsible, but since I moved from the SCCM team I’m left to find clever ways around it. The following registry keys can be used to change Configuration Manager Remote Control (CMRC) connection settings.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Client\Client Components\Remote Control
Access Level "2" Allow Local Administrators to do Remote Control "1" Allow Remote Control of an unattended computer "1" Enabled "1" Firewall Exception Profiles "f" (hex, 15 decimal) Permission Required "0" PermittedViewers "domain\accountname" (enter acct/group name) Remote Control Security Group SID "SID of group to connect"
You can get your the SID of your group pretty easily. just run:
Get-LocalGroup | select name,SID
or for domain grop
Get-ADGroup -Identity "Groupname" | select name,sid
Either should give you want you need for that entry.