About the service connection point in System Center Configuration Manager

Applies to: System Center Configuration Manager (Current Branch)

The System Center Configuration Manager service connection point is a site system role that serves several important functions for the hierarchy. Before configuring the service connection point, understand and plan for its range of uses which might affect how you configure this site system role:

  • Manage mobile devices with Microsoft Intune - This role replaces the Windows Intune connector used by previous versions of Configuration Manager, and can be configured with your Intune subscription details. See Hybrid mobile device management (MDM) with System Center Configuration Manager and Microsoft Intune

  • Manage mobile devices with on-premises MDM - This role provides support for on-premises devices you manage that do not connect to the Internet. See Manage mobile devices with on-premises infrastructure in System Center Configuration Manager

  • Upload usage data from your Configuration Manager infrastructure - You can control the level or amount of detail you upload. Uploaded data helps us:

    • Proactively identify and troubleshoot problems

    • Improve our products and service

    • Identify updates for Configuration Manager that apply to the version of Configuration Manager you use

    For information about the data collected by each level, and how to change the collection level after the role installs, see Diagnostics and usage data and then follow the link for the version of Configuration Manager that you use.

    For additional information, see Usage data levels and settings.

  • Download updates that apply to your Configuration Manager infrastructure - Only relevant updates for your infrastructure are made available, based on usage data you upload.

    Each hierarchy supports a single instance of this role:

  • The site system role can only be installed at the top-tier site of your hierarchy (A central administration site or the stand-alone primary site).

  • If you expand a stand-alone primary site into a larger hierarchy, you must uninstall this role from the primary site and can then install it at the central administration site.

Modes of operation

The service connection point supports two modes of operation:

  • In online mode, the service connection point automatically checks every 24 hours for updates and then downloads new updates that are available for your current infrastructure and product version, making them available in the Configuration Manager console

  • In offline mode, the service connection point does not connect to the Microsoft cloud service and you must manually Use the Service Connection Tool for System Center Configuration Manager to import available updates

When you change the mode between online or offline after you have installed the service connection point, you must then restart the SMS_DMP_DOWNLOADER thread of the Configuration Manager SMS_Executive service before this change becomes effective. To do this, use the Configuration Manager Service Manager to restart only the SMS_DMP_DOWNLOADER thread of the SMS_Executive service. You can also restart the SMS_Executive service for Configuration Manager (which restarts most site components), or wait for a schedule task like a site backup which stops and then later restarts the SMS_Executive for you.

To use the Configuration Manager Service Manager, in the console navigate to Monitoring > System Status > Component Status, click Start, and then select Configuration Manager Service Manager. In the service manager:

  • In the navigation pane, expand the site and then Components, and then select the component you want to restart.

  • In the details pane, right click on the component and select Query.

  • After the status of the component is confirmed, right click on the component again, and select Stop.

  • Query the component again, to confirm it is stopped, and then right click on the component one more time, and select Start.


When you add a Microsoft Intune subscription to the service connection point, it automatically sets the site system role to be online. The service connection point does not support offline mode when configured with an Intune subscription.

When the role installs on a computer that is remote from the site server:

  • The computer account of the site server must be a local admin on the computer that hosts a remote service connection

  • You must configure the site system server that hosts the role with a Site System Installation Account

  • The Site System Installation Account is used by the distribution manager on the site server to transfer updates from the service connection point

Internet access requirements

To enable operation, the computer that hosts the service connection point and any firewalls between that computer and the Internet must pass communications through port TCP 443 and port TCP 443 to the following Internet locations. The service connection point also supports using a web proxy (with or without authentication) to access these locations.

Updates and Servicing

  • *.akamaiedge.net

  • *.manage.microsoft.com

  • go.microsoft.com

  • blob.core.windows.net

  • download.microsoft.com

  • download.windowsupdate.com

  • sccmconnected-a01.cloudapp.net

Microsoft Intune

Windows 10 Servicing

Install the service connection point

When you run Setup to install the top-tier site of a hierarchy, you have the option to install the service connection point.

After setup runs, or if you are reinstalling the site system role, use the Add Site System Roles wizard, or the Create Site System Server wizard to install the site system on a server at the top-tier site of your hierarchy (the central administration site, or a stand-alone primary site). Both wizards are located on the Home tab in the console at Administration > Site Configuration > Servers and Site System Roles.

To submit product feedback, please visit Configuration Manager Feedback