Firewall Blocking PSWindowsUpdate

Solution 1:

A new firewall rule needs to be created to allow the subsequently negotiated dynamic RPC port through.

Ref: martbasi on Jan 13, 2015 at https://i1.gallery.technet.s-msft.com/2d191bcd-3308-4edd-9de2-88dff796b0bc/view/Discussions/6:

Ran into this also ... googling and wiresharking leads me to the conclusion that initial contact with the remote client happens on TCP 135, but then redirects to a High-Rang port that is dynamically selected. As of Win 2008, this is 49152 - 65535."

New inbound firewall rule, custom:

  • program path: %SystemRoot%\System32\dllhost.exe
  • protocol type: TCP
  • local port: RPC Dynamic Ports
  • remote port: all ports.

Configure remaining options as appropriate for your environment and security policy.