Use the following information to understand how Configuration Manager 2007 Network Access Protection (NAP) evaluation affects clients and how you can modify the behavior with related configuration options and tasks.

The NAP Evaluation Process

NAP evaluation in Configuration Manager 2007 is the process by which NAP-capable clients in Configuration Manager assess their compliance status and send it in a client statement of health to a System Health Validator point.

They do this by checking whether they require the software updates specified in their Configuration Manager Network Access Protection (NAP) policies by the effective date you have configured as a Configuration Manager NAP property. For more information about setting the effective date, see How to Set the Effective Date and Time to Begin NAP Evaluation for Network Access Protection.

Configuration Options and Tasks Related to NAP Evaluation

By default, the NAP evaluation process happens when the client attempts to connect to the network and once every day. For more information about configuring NAP evaluation options, see How to Configure NAP Evaluation Settings.

To stop NAP evaluation for a specific software update, delete the Configuration Manager NAP policy that contains the software update. For more information, see How to Delete a Configuration Manager NAP Policy to Stop NAP Evaluation in Network Access Protection.

To delay NAP evaluation for a specific software update, modify the effective date in the Configuration Manager NAP policy for a later date. For more information, see How to Set the Effective Date and Time to Begin NAP Evaluation for Network Access Protection.

If you want to stop all NAP-capable clients from assessing their compliance status against Configuration Manager NAP policies, disable the Network Access Protection client agent. For more information, see How to Disable the Network Access Protection Client Agent.

See Also