{
  "port": 2701,
  "protocol": "tcp",
  "service": "SCCM/SMS Remote Control",
  "oneLiner": "Microsoft Configuration Manager remote control — an admin can take over this desktop.",
  "whatItIs": "Microsoft's own port table for Configuration Manager lists TCP 2701 for \"Remote Control (control)\" from the ConfigMgr console to a client. The listener is CmRcService.exe, the remote control agent installed with the ConfigMgr (formerly SMS) client, and it authenticates the admin with Kerberos, falling back to NTLM. A 2701 on a scan is a reliable marker of a domain-joined, ConfigMgr-managed Windows endpoint.",
  "exposure": {
    "verdict": "never",
    "note": "This is a screen-and-keyboard takeover channel for managed desktops; it belongs on an internal management network, never on a public interface."
  },
  "checkCommand": "nc -vz -w 3 TARGET 2701",
  "links": [
    {
      "title": "Microsoft Learn — Ports used for connections in Configuration Manager (console → client, Remote Control 2701)",
      "url": "https://learn.microsoft.com/en-us/intune/configmgr/core/plan-design/hierarchy/ports",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 2701 (sms-rcinfo)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=2701",
      "kind": "iana"
    }
  ],
  "ianaName": "sms-rcinfo"
}