Event ID 1002 — Windows Security Center

Applies To: Windows Server 2008 R2

By default, the Windows Security Health Agent (WSHA) will be installed with the Network Access Protection (NAP) client on computers running Windows Vista or Windows XP with Service Pack 3 (SP3). The WSHA monitors health status of Windows Security Center and reports this information to the NAP Agent service.

In order for the status of Windows Security Center to be reported to the NAP Agent service, WSHA must be successfully initialized so that it can update changes in client health status.

Event Details

Product: Windows Operating System
ID: 1002
Source: Microsoft-Windows-SystemHealthAgent
Version: 6.1
Message: The Windows Security Health Agent was initialized successfully.
Scan Interval: %1 minutes.
Time delay before first scan: %2 seconds.
Time interval between manual remediation state change: %3 seconds.
Manual remediation timeout interval: %4 seconds.


This is a normal condition. No further action is required.

Windows Security Center

NAP Infrastructure