Endpoint Manager has a high level of control over devices when granted access rights. The device controls remote access security. It stores its remote access security settings in the registry.
You can change remote control settings and security model on clients by updating the agent configuration settings ( Tools > Agent configuration), and from the updated configuration's shortcut menu, clicking Schedule update. Once you deploy the update to devices, their agents will use the settings you specified.
For more information, see About the Remote control page.