To manage endpoints, the asset on that hosts them must be licensed. The endpoints can be on the same computer as the Windows agent or on a remote computer in a process called management by proxy. A computer can host multiple endpoints, which are managed by a single Windows agent.
When you register a Windows agent on a computer, Secure Configuration Manager automatically creates and registers a Windows operating system endpoint that represents the operating system for that computer. You must have a Windows operating system endpoint on the same computer where you manage an Active Directory endpoint. You do not need the Windows operating system endpoint on computers that host IIS, Oracle, SQL Server, and network device endpoint