Event ID 1026 — WSHA Communication with NAP Agent

  • Article

Applies To: Windows Server 2008 R2

Windows Security Health Agent (WSHA) must be able to communicate with the Network Access Protection (NAP) Agent service in order to manage client health status that is monitored and reported by the Windows Security Center service. In order for this communication to take place, the NAP Agent service must be running.

Event Details

Product: Windows Operating System
ID: 1026
Source: Microsoft-Windows-SystemHealthAgent
Version: 6.1
Symbolic Name: MSSHA_EVENT_GET_SOH_FAIL
Message: The Windows Security Health Agent failed to specify a new security health state for the computer.
Failure Code: %1.
The correlation id for this transaction is %2

Resolve

Start the NAP Agent service

To perform this procedure, you must be a member of the Administrators group, or you must have been delegated the appropriate authority.

To start NAP Agent and configure the service to start automatically:

  1. On the NAP client computer, click Start, click Run, type services.msc, and then press ENTER.
  2. In the console tree, double-click Network Access Protection Agent.
  3. In the Network Access Protection Properties window, next to Startup type, choose Automatic.
  4. Under Service status, click Start.
  5. If the service has started successfully, the service status will be displayed as Started. Click OK.
  6. Close the Services console.

Verify

To verify that the NAP Agent service is started:

  1. On the NAP client computer, click Start, point to All Programs, click Accessories, and then click Command Prompt.
  2. In the command window, type net start, and then press ENTER.
  3. Under These Windows services are started, verify that Network Access Protection Agent is displayed.

WSHA Communication with NAP Agent

NAP Infrastructure