Windows Security Center

Applies To: Windows Server 2008 R2

By default, the Windows Security Health Agent (WSHA) will be installed with the Network Access Protection (NAP) client on computers running Windows Vista or Windows XP with Service Pack 3 (SP3). The WSHA monitors health status of Windows Security Center and reports this information to the NAP Agent service.

In order for the status of Windows Security Center to be reported to the NAP Agent service, WSHA must be successfully initialized so that it can update changes in client health status.

Events

Event ID Source Message

1002

Microsoft-Windows-SystemHealthAgent

The Windows Security Health Agent was initialized successfully.
Scan Interval: %1 minutes.
Time delay before first scan: %2 seconds.
Time interval between manual remediation state change: %3 seconds.
Manual remediation timeout interval: %4 seconds.

1003

Microsoft-Windows-SystemHealthAgent

The Windows Security Health Agent could not be initialized.
Failure Code: %1

1005

Microsoft-Windows-SystemHealthAgent

The Windows Security Health Agent completed an online scan.

1006

Microsoft-Windows-SystemHealthAgent

The Windows Security Health Agent failed to complete an online scan.
Failure Code: %1

Windows Security Health Agent (WSHA)

NAP Infrastructure