It sounds like they are atempting to access teh AMS through the interent. Have you tried defining the AMS by its internal LAN IP address in the install package? If not, try doing so and installing on a test client to see if this helps.