If you assign a Configuration Manager 2007 client computer to a site that supports Internet-based client management, but never want the client to be managed over the Internet, configure it for intranet-only client management.
This configuration is achieved by ensuring that the client is not installed for Internet-only communication, and the client is not configured with the Internet fully qualified domain name (FQDN) of the site's Internet-based management point.
To configure client computers for intranet-only management
Install the client computer without the CCMSetup.exe client.msi property CCMALWAYSINF=1.
Do not assign an Internet-based management point on the Internet tab of Configuration Manager from the Control Panel of the client computer, or specify the CCMSetup.exe client.msi property CCMHOSTNAME= [FQDN of the Internet-based management point].
TasksHow to Assign Configuration Manager Client Computers to the Internet-Based Management Point
How to Configure Configuration Manager Client Computers for Internet-Only Management
ConceptsAbout Configuration Manager Client Installation Properties
Overview of Internet-Based Client Management
Administrator Checklist: Configuring Client Computers for a Site that Supports Internet-Based Client Management
Other ResourcesDeploying Configuration Manager Sites to Support Internet-Based Clients
Tasks for Configuration Manager Internet-Based Client Management