The Microsoft System Center DPM agent can be installed on computers that are in the same domain as the DPM server, in a workgroup, and in an untrusted domain. If you deploy the DPM agent manually, then you will need to attach the agent to the DPM server post deployment. For the DPM agent to be able to communicate with the DPM server through a firewall, specific firewall exceptions are required.