Symptom:
For Attendant console server set-up, the server gets pushed down with GPO. The server gets broken with some dynamic ports being blocked by existing firewall filter(s) blocking the ports.

Conditions:
Windows firewall is blocking port 63216 (this is only 1 of so many dynamic port blocked, e.g. 63216,63217,63218 etc)
Below screenshot shows this.

Direction:                               Inbound
                Source Address:                    10.224.6.3  (this is the call manager)
                Source Port:                           443
                Destination Address:            10.224.6.6 (this is the attendant console publisher)
                Destination Port:                   63216 (this is just one of the dynamic port which I would like to seek help from you on what the range is)
                Protocol:                                6