Enrollment and Enrollment proxy point
These two roles are used in the process of certificate enrollment for mobile devices and the provisioning and management of Intel AMT-based computers, probably the most common usage of which is for the management of Apple Mac computers. When we talk about certificate enrollment for mobile devices, this should not to be confused with Microsoft Intune. This functionality is only related to the traditional management of mobile devices with Configuration Manager natively. We are going to discuss these two roles together as they are undeniably linked; however, in most organizations, these are likely to be separated across servers in different networks with the proxy being in a demilitarized zone. As with many other roles, these two are also web applications that run on IIS and comply to standard HTTP error codes as guidance. The default installation location for these roles are as follows:
%ProgramFiles%\SMS_CCM\EnrollmentPoint%ProgramFiles%\SMS_CCM\EnrollmentProxyPoint...
