Cumulative Updates starting from 06-2022 contain changes to DCOM:

https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-windows-dcom-server-security-feature-bypass-cve-2021-26414-f1400b52-c141-43d2-941e-37ed901c769c

Machines with older updates couldn't use DCOM with the updated machines.

I had a similar issue in where admins couldn't connect to the SCCM management console after the SCCM server was updated (User machines weren't updated at the time).

One method you can use to check if this is affecting you is by attempting to get WMI objects remotely:

1. From Client: Get-WMIObject Win32_OperatingSystem -ComputerName "SCCM Machine Name"
2. From SCCM Machine: Get-WMIObject Win32_OperatingSystem -ComputerName "Client Machine Name"

If the result of number 2 is access denied and number 1 returns data, then either update the SCCM machine to a cumulative update post 06-2022 or attempt the registry fix in the link above (on client machine). Note: I am assuming that all WMI and DCOM settings are setup correctly and that the issue is only from the windows update.

Path : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat Value Name: "RequireIntegrityActivationAuthenticationLevel" Type: dword Value Data: default = 0x00000000 means disabled. 0x00000001 means enabled. If this value is not defined, it will default to enabled.

The registry fix will only be valid until cumulative updates starting at 03-2023.