What are the results you are seeing on the push?
Frankly though, if it's a single box, I'd use a pull. There's a web-page on the policy for the agent you can run from the server and then you can "pull" the installation. I use that all the time on small environments and/or servers with different security contexts.