Windows Firewall preventing UDP

I would also recommend enabling command polling on all clients. You could start with something like once every 12 hours for all clients, and maybe more aggressive for problematic clients.