SCCM Roles applicable for Central, Primary & Secondary Sites

The below table from Microsoft will help us to identify the Site System roles that we can install at each type of site in a System Center 2012 Configuration Manager hierarchy, and whether the site system role provides functionality for its site only, or for the entire hierarchy. We can install any supported site system role on the site server computer or on a remote site system server at a central administration site or primary site. At a secondary site, only the distribution point is supported on a remote site system server.

Site system role	Central administration site	Child primary site	Stand-alone primary site	Secondary site	Site-specific or Hierarchy-wide option
Application Catalog Web Service Point	No	Yes	Yes	No	Hierarchy
Application Catalog Website Point	No	Yes	Yes	No	Hierarchy
Asset Intelligence Synchronization Point1	Yes	No	Yes	No	Hierarchy
Certificate Registration Point	Yes	Yes	Yes	No	Hierarchy
Distribution Point2,5	No	Yes	Yes	Yes	Site
Fallback Status Point	No	Yes	Yes	No	Hierarchy
Management Point2,3,5	No	Yes	Yes	Yes	Site
Endpoint Protection Point	Yes	No	Yes	No	Hierarchy
Enrollment Point	No	Yes	Yes	No	Site
Enrollment Proxy Point	No	Yes	Yes	No	Site
Out of Band Service Point	No	Yes	Yes	No	Site
Reporting Services Point	Yes	Yes	Yes	No	Hierarchy
Software Update Point4,5	Yes	Yes	Yes	Yes	Site
State Migration Point5	No	Yes	Yes	Yes	Site
System Health Validator Point	Yes	Yes	Yes	No	Hierarchy
Windows Intune Connector	Yes	No	Yes	No	Hierarchy

¹ Configuration Manager supports only a single instance of this site system role in a hierarchy.

² By default, when you install a secondary site, a management point and a distribution point are installed on the secondary site server.

³ This role is required to support clients in Configuration Manager. Secondary sites do not support more than one management point and this management point cannot support mobile devices that are enrolled by Configuration Manager.

⁴ When your hierarchy contains a central administration site, install a software update point at this site that synchronizes with Windows Server Update Services (WSUS) before you install a software update point at any child primary site. When you install software update points at a child primary site, configure it to synchronize with the software update point at the central administration site.

⁵ Prior to System Center 2012 R2 Configuration Manager, all site system roles at a secondary site must be located on the site server computer. The only exception is the distribution point. Secondary sites support installing distribution points on the site server computer and on remote computers. Beginning with System Center 2012 R2 Configuration Manager, the state migration point can also be installed on the site server computer or on a remote computer, and can be co-located with a distribution point.

1. http://technet.microsoft.com/en-us/library/gg712282.aspx#Plan_Where_to_Install_Site
2. http://gallery.technet.microsoft.com/SCCM-2012-Roles-applicable-727614d7