Information Technology Reference
In-Depth Information
You can save an existing health policy as a template to use to build new health policies. To
save a policy as a template, right-click the policy in the Health Policies folder and select Save
And Apply As Template, as shown in Figure 4-41.
FIGURE 4-41
The Network Policy Server Health Policies details pane
You can configure Network Access Protection enforcement to prevent noncompliant comput-
ers from connecting to the main network. They can be configured either to fail the connection
or to be placed on a restricted network for remediation. There are multiple scenarios for NAP
enforcement, including IEEE 802.1x for either wired or wireless connections, RD Gateway, DHCP,
and VPN. The exam covers only the two most common NAP scenarios: DHCP and VPN.
Nap enforcement for DhCp
The DHCP scenario is straightforward and prevents noncompliant computers from getting a
DHCP address on the main network. The scenario depends on DHCP either being installed on
the main NAP computer or on a remote computer in the network that then gets NPS installed
on it in RADIUS Proxy mode.
