Deploy NetSupport School with SCCM

It’s not that bad at all — the firewall rules are a bit tricky though.

  1. Place the installation media in a folder.
  2. Make sure you have a customized ‘Client32.ini’ and ‘NSM.LIC’ file in the package folder containing your site’s licensing information.
  3. Use this script! Replace <CIDR-Net-Address> with your gateway address and netmask in slash-notation.
    @ECHO OFF
    ECHO Installing NetSupport School
    ECHO Do not close this window. It will close when the install is finished.
    
    REM Main Install
    msiexec /i "NetSupport School.msi" /qb
    
    REM Commands to Open ports
    netsh advfirewall firewall add rule name="Open Port 46200, smartsync-06" dir=in action=allow protocol=TCP localport=46200
    netsh advfirewall firewall add rule name="Open Port 5405, netschool" dir=in action=allow protocol=TCP localport=5405
    netsh advfirewall firewall add rule name="Open Port 5463, smartsync-01" dir=in action=allow protocol=TCP localport=5463
    netsh advfirewall firewall add rule name="Open Port 5485, smartsync-02" dir=in action=allow protocol=TCP localport=5485
    netsh advfirewall firewall add rule name="Open Port 5491, smartsync-04" dir=in action=allow protocol=TCP localport=5491
    netsh advfirewall firewall add rule name="Open Port 5493, smartsync-05" dir=in action=allow protocol=TCP localport=5493
    netsh advfirewall firewall add rule name="Open Port 5496, smartsync-03" dir=in action=allow protocol=TCP localport=5496
    
    REM Commands for Program Exceptions
    netsh advfirewall firewall add rule name="NetSupport School 2" dir=in action=allow program="%ProgramFiles%\Netsupport\Netsupport School\client32.exe" enable=yes remoteip=<CIDR-Net-Address>,LocalSubnet profile=domain
    netsh advfirewall firewall add rule name="NetSupport School 2" dir=in action=allow program="%ProgramFiles%\Netsupport\Netsupport School\client32.exe" enable=yes remoteip=<CIDR-Net-Address>,LocalSubnet profile=domain

It seems pretty straight-forward and plug-and-play. The firewall rules could (should?) be done through Group Policy instead.

Advertisements

3 thoughts on “Deploy NetSupport School with SCCM

  1. Out of curiosity, is there a reason to open all these ports? I’ve always just added client32.exe to my firewall list, never had any problem, what am I missing?

  2. Dcg1k, that’s a great question. I’m not 100% sure that those ports are required if you have the .exe file listed. Thanks for your comment, and please let me know if you find more information!

  3. Pingback: Table of Contents | windowsmasher

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s