Endpoint Protection Small Business Edition

Hey all-

I am having an issue with deploying the SEP client to some workstations.  I go to add a client, select my package and get to the browse network tab.  I drop down the domain box and I can see all the workstations in the environment.  However, when I choose to swing it over to install, it asks me for creds, which I supply.  I get the "Login to $hostname ($IP) failed.  The client could not be installed on the remote computer."  I know I have proper credentials.  

I have two subnets setup here, 10.0.1.1 and 10.0.0.1 with and /24 mask.  Those networks are VLANed on HP switches.  The SEPM server sits on the 10.0.0.1 subnet and has no issue pushing clients to other servers on that same 10.0.0.1 subnet.  I can ping the 10.0.1.1 subnet clients from the SEPM server.  Those clients also access shares from the 10.0.0.1 subnet.  However I cannot push the client to them.  Windows firewalls are off on both ends.  I dont know why its not working.  Any insight would be most helpful.  Thank you very much.

Have you made sure everything is correctly per this article?

Preparing Windows and Mac computers for remote deployment

Is remote registry running? This is usually one of the culprits.

I have verified everything on the lists at the above links.  Remote registry service is disabled and not running.  UAC is set to not notify.(all the way down)

DOH!  Sorry, I see now that the Remote registry service needs to be running, or at least once I started it up, I was able to connect and push client.  What is the downside of this?  Does it need to be enabled after the push?  Can I enable this through a GPO?  I think all the client machines have it disabled.  At least mine was.

It only needs to be enabled for the push from SEPM. You can disable after the install is done.