Add a Constraint to a Network Policy

  • Article

Applies To: Windows Server 2008

Add a constraint to a network policy

You can use this procedure to add a constraint to an existing network policy.

Constraints are additional network policy parameters that are optional. Constraints differ from network policy conditions in one substantial way: when a condition does not match a connection request, NPS continues to evaluate other configured network policies in search of a match for the connection request, but when a constraint does not match a connection request, NPS does not evaluate additional network policies, NPS rejects the connection request and the user or computer is denied network access.

Membership in Domain Admins, or equivalent, is the minimum required to complete this procedure.

To add a constraint to a network policy

  1. Open the Network Policy Server (NPS) Microsoft Management Console (MMC) snap-in, double-click Policies, and then click NetworkPolicies.

  2. In the upper details pane, double-click the network policy to which you want to add a constraint, and then click the Constraints tab.

  3. In Constraints, click the constraint that you want to add to the policy.

  4. In the details pane, configure the value for the constraint, and then click OK.