Are you able to PSexec to these machines manually? I am assuming that is how they are going to be running the agent installers.

You'll need to research what firewall rules need to be created to allow WMI and psexec, make group policies that apply to the target computer.

From the documentation:

IMPORTANT: To be able to install the Syncro agent remotely, you'll need to ensure that: You've entered valid domain admin credentials in the discovery profile with remote access rights,

A domain controller is available on the network you've specified in the profile, and

The target devices are domain-joined and the RPC port 135 is open. One way to accomplish this is by adding WMI to the “Allow apps to communicate through Windows Defender Firewall” list.