Information Technology Reference
In-Depth Information
■
On NAP-capable client computers, configure as described later in this chapter in the
“Configuring NAP clients” section.
■
If using remediation servers, configure them as described in the “Configuring isolation
and remediation of noncompliant computers using DHCP and VPN” section.
■
Configure a health policy, connection request policy, and network policy to enforce
NAP for DHCP.
■
Configure the constraints in the network policy to allow health checks on DHCP IP
address renewal.
■
Select the network policy you want to configure in the Network Policy Server console
and double-click.
■
On the Constraints tab, ensure that Authentication Methods has Perform Machine
Health Check Only selected, as shown in Figure 4-43.
FIGURE 4-43
The Constraints tab of the network policy properties.
Nap enforcement for VpN
The VPN scenario for NAP enforcement follows a similar process to that for DHCP, but with
some differences. The process flow for NAP enforcement for VPNs is as follows: