Network Access Protection Client Agent Properties: General Tab
Applies To: System Center Configuration Manager 2007, System Center Configuration Manager 2007 R2, System Center Configuration Manager 2007 R3, System Center Configuration Manager 2007 SP1, System Center Configuration Manager 2007 SP2
Enabling or disabling Configuration Manager 2007 Network Access Protection (NAP) on clients is a site-wide setting. Once it is enabled, Configuration Manager 2007 can monitor NAP-capable computers on this site.
After enabling the Network Access Protection client agent, any information related to Network Access Protection will be reported in the Network Access Protection node under the sections NAP Remediation Statistics and Error Summary. For more information, see Network Access Protection Home Page.
Additionally, the following options will become available:
The Policies node under Network Access Protection in the Configuration Manager console, so that you can create, modify, and delete Configuration Manager NAP policies. If you have the Configuration Manager console open when you enable the Network Access Protection client agent, refresh the Network Access Protection node to display the Policies node.
For more information about Configuration Manager NAP policies, see How to Configure Configuration Manager NAP Policies for Network Access Protection.
The Network Access Protection tab for a packaged software update under the Software Updates node.
The Network Access Protection page on the Distribute Software Updates Wizard.
Do not enable the Network Access Protection client agent immediately on newly created Configuration Manager 2007 sites; instead, wait until the Configuration Manager site publication has fully replicated to the global catalog servers used by the System Health Validator points. This is particularly important if your Windows Network Policy Server will restrict clients with a compliance status of "Unknown," which maps to the Configuration Manager System Health Validator property of Vendor specific error code received.
This tab contains the following elements:
Enable Network Access Protection on clients
Select to enable Network Access Protection (NAP) for all NAP-capable clients assigned to this Configuration Manager 2007 site. Deselect to disable Network Access Protection for all NAP-capable clients assigned to this Configuration Manager 2007 site.
For more information about this option, see About Enabling and Disabling Network Access Protection.
For more information about NAP-capable clients, see About the NAP Client Status in Network Access Protection.
Saves the changes, and exits the dialog box.
Exits the dialog box without saving any changes.
Saves the changes, and remains in the dialog box.
Opens the help topic for this tab of the dialog box.
About the Network Access Protection Process
About Configuration Manager NAP Policies in Network Access Protection
About Network Access Protection Remediation
About the Statement of Health (SoH) in Network Access Protection
About System Health Validator Points in Network Access Protection
Prerequisites for Network Access Protection
For additional information, see Configuration Manager 2007 Information and Support.
To contact the documentation team, email SMSdocs@microsoft.com.