Secure Configuration Manager includes a license key that defines the number of endpoints that you can add to the managed assets map. When you register a Windows agent on a computer, Secure Configuration Manager automatically creates and registers a Windows endpoint that represents the operating system for that computer. You must have a Windows endpoint on the same computer where you manage an Active Directory endpoint. You do not need the Windows endpoint on computers that host IIS, Oracle, SQL Server, and network device endpoints. For more information about licensing, see the NetIQ Secure Configuration Manager Installation Guide.