Microsoft Configuration Manager remote control — an admin can take over this desktop.
Microsoft's own port table for Configuration Manager lists TCP 2701 for "Remote Control (control)" from the ConfigMgr console to a client. The listener is CmRcService.exe, the remote control agent installed with the ConfigMgr (formerly SMS) client, and it authenticates the admin with Kerberos, falling back to NTLM. A 2701 on a scan is a reliable marker of a domain-joined, ConfigMgr-managed Windows endpoint.
Do not expose
This is a screen-and-keyboard takeover channel for managed desktops; it belongs on an internal management network, never on a public interface.
$ nc -vz -w 3 TARGET 2701Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.