SMS 2003 and workgroup clients or clients from untrusted forest

Computers in a workgroup require WINS because they cannot query Active Directory for SMS services (server locator point and management point).  While the management point is automatically added in WINS, the server locator point is not, so this record must be manually entered by a WINS Administrator. 

SMS 2003 provides limited support for computers in a workgroup, with the following conditions and exceptions:

1. Workgroup site servers are not supported.
2. Workgroup support is for Advanced Clients only.
3. Clients must use WINS to locate SMS services.
4. Administrative user rights on the computer are required for installing the SMS client software.
5. Active Directory discovery and user targeting is not supported.
6. Advertisements targeted to Active Directory objects, users, or user groups are not supported.
7. Global roaming is not supported.

Some interesting links:

1. Ports that Systems Management Server 2003 uses to communicate through a firewall or through a proxy server - http://support.microsoft.com/default.aspx?kbid=826852
2. SMS 2003 Standard Security, WINS, and Advanced Clients - http://myitforum.com/articles/8/view.asp?id=7323
3. Managing Workgroup Clients with SMS 2003 - http://myitforum.com/articles/8/view.asp?id=7747
4. SMS 2003 in a DMZ - http://www.myitforum.com/articles/8/view.asp?id=8283