SCCM Client Push Installation failed

I believed most of you guys may facing this problem when try to push SCCM client to the workstations using Client Push Installation. When you failed to push the client from SCCM server, first thing come to your mind maybe is Windows Firewall blocking that. But somehow, after you enable necessary ports for SCCM Client Push Installation at Windows Firewall, it still doesnt work. After that you might try to stop the Windows Firewall service at the workstation, but still no luck...

Recently during we work on one large SCCM deployment, we found one interesting stuff. Here begin the story, we suspected one of the workstation is infected by virus, because the users is complaining the machine is slow and very difficult for the user to perform daily work. Unfortunately, that machine haven't installed with SCCM client yet. Therefore, we went down to the machine and perform a virus scan, we also tried to extract the local machine antivirus program logs file to understand the machine condition. After we gather all the necessary logs files, we found few interesting entries from the log:

C:\Windows\system32\ccmsetup.exe
Prevent remote creation/modification/deletion of anything in the Windows folder and subfolders. Action: Blocked

C:\Windows\SMSClientInstall
Prevent remote creation/modification/deletion of anything in the Windows folder and subfolders. Action: Blocked

I hope the above information can give you guys a hint when you hit such a problem in the future. Do share this with your customer if you facing this problem.