OpsMgr Agent upgrade fails

I have just installed OpsMgr CU4 on my OpsMgr server, but when Approving agent upgrade in Pending Management, one server comes up with:

"The MOM Server could not start the MOMAgentInstaller service on computer "name" in the time."

This was the only server having having the problem. This server is running Windows 2008 with firewall enabled, but I have other servers with same configuration (also W2k8 w. FW enabled).
BUT... it turned out that IT WAS the firewall that was the problem.

Deleting the rule "MOM Agent Installer Service" solved the problem.

Remote scripting on Windows Server 2008

If you leave the windows firewall turned on on your Windows Server 2008 boxes, you are not allowed to run script against a remote server.
The windows firewall will block these attemps.

Running in a domain, the fastest way to allow remote script execution, is to create a group policy...
Create a new GPO and drill to:
Computer Configuration -> Policies -> Administrative Templates -> Network -> Network Connections -> Windows Firewall -> Domain Profile
Set "Windows Firewall: Allow inbound remote administration exception" to "Enabled"
- and configure with a specific ip address (if only one machine is allowed for remote scripting)or a subnet (the subnet from where the remote script will be fired).