Firewall port requirements for SCCM remote control

Question

Firewall port requirements for SCCM remote control

abdulkhader-8564 6

Firewall port requirements for SCCM remote control. I heard that port TCP – 135. TCP – 2701. TCP – 2702 are needed for this requirement . I need source and destinations computers like source is client computers and destinations is SCCM primary server? Please help on this

Amandayou-MSFT 11,156 Reputation points

2021-03-23T06:06:24.367+00:00

The case seems to be related with SCCM, so I change the tag to CM-general.

4 answers

Your answer

Amandayou-MSFT 11,156 Reputation points

2021-03-23T06:06:24.367+00:00

The case seems to be related with SCCM, so I change the tag to CM-general.

Answer 1

Hi @abdulkhader-8564 ,

The source could be Configuration Manager console, the destination is client, and we should open TCP Port 2701 on the side of client.

About the details of port, please refer to this link:
https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/ports#BKMK_PortsConsole-Client

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

abdulkhader-8564 6

Yes I agreed , Suppose I am accessing the user computers from my local laptop , so I need to run CmRcViewer.exe in my laptop.

So here is Source is my computers IP and destination is users computers right ? so we need to open the port between these subnet? . So my question is do I need to open any port for primary server either giving as source or destination ?

Jason Sandys 31,411 Reputation points Microsoft Employee Moderator

2021-03-23T16:27:17.15+00:00

So here is Source is my computers IP and destination is users computers right ?

Correct.

So my question is do I need to open any port for primary server either giving as source or destination ?

If you are just running CmRcViewer.exe, then no (unless you launch CmRcViewer.exe with the switch to connect to the site server for auditing purposes). If you are running the console, then the console must be able to communicate with the SMS Provider (and not the primary site server unless the SMS Provider is co-located on the primary site server).

Answer 3

abdulkhader-8564 6

Thanks Amandayou,

Here is the My confusion. Source is Client and destination is Primary server? Could you please triple confirm

Garth 5,801 Reputation points

2021-03-23T10:25:14.74+00:00

No, you have it backwards, source will be any computer with the cm console.
Destination will be the computer you are trying to remote control.

Answer 4

abdulkhader-8564 6

thanks Garth,

"source will be any computer with the cm console." which means SCCM Primary servers?

Jason Sandys 31,411 Reputation points Microsoft Employee Moderator

2021-03-23T15:43:07.557+00:00

The connection comes the system running the console that initiates the connection. If that happens to be the primary site server, then yes, those are one in the same however that's generally a bad practice (running the console on the primary site server). You should be installing and running the console on your workstation(s) and performing your admin work there including initiating remote control.
Garth 5,801 Reputation points

2021-03-23T15:55:44.767+00:00

+1 to what jason says!

Share via

Firewall port requirements for SCCM remote control

4 answers

Your answer