O'Reilly logo
  • Mandar Gothoskar thinks this is interesting:

The Endpoint Protection site system role must be deployed on your central administration site (CAS) or standalone primary site and prior to configuring any EP policies or client settings.

From

Cover of System Center Configuration Manager Current Branch Unleashed, First Edition

Note

Endpoint protection role must be installed on primary site.