Configure Network Policy Expiration

Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2

When you configure the policy expiration condition in a network policy, the policy will no longer be used to evaluate client access requests after the date you specify. This is the method required to configure deferred enforcement for the NAP with 802.1X enforcement method. When you configure policy expiration, you must also configure another network policy that will match client access requests after the expiration date. To ensure this policy is not used prior to the expiration date, place it after the expired network policy in the processing order.

Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (

Configure the policy expiration condition in network policy

Use the following procedure to set an expiration date for a network policy.

To configure the policy expiration condition

  1. Click Start, click Run, type nps.msc, and then press ENTER.

  2. In the Network Policy Server console tree, open Policies\Network Policies.

  3. In the details pane, under Policy Name, double-click the name of the network policy you want to configure for expiration.

  4. In the policy properties window, on the Conditions tab, click Add, choose Policy Expiration, and then click Add.

  5. In the Policy Expiration dialog box, in Date and Time, enter the date and time when the policy will expire, and then click OK.

  6. In the policy properties window, under Condition, verify that Policy Expiration appears, and then click OK.

See Also


Configure Network Policy for Deferred Enforcement