Hi,
Just wondering if anyone has encountered this or may be able to offer up an explanation. We monitor all active/open ports on all of the servers in our environment with a 3rd party utility. I've noticed that the spoolsv.exe service has been using some strange ports on our Windows 2012 R2 Orion additional polling engine servers. The ports I've seen are in the 1500, 1800, 2200 and 18000 range, which seems a bit random, and is well outside of the typical Windows 2008/2012 Dynamic Ports range. We're speculating that it's related to RDP connections, because we certainly aren't printing jobs or sharing printers from our Orion servers!
Thanks in advance!