this is the best answer. "That suggests to me that the machine account for the configmgr server is not part of the local administrators group on the client machine. In configmgr, goto Administration, Site Configuration, Sites. Then on the ribbon, click on Client Installation Settings. What have you got under the Accounts tab?"
We are always just asking how. This is exactly the answer for this, if you know you dealt with firewall and all other settings. Thank you!!