To verify that the Configuration Manager 2007 clients are going into remediation, you can use any one of the following procedures:
- Run Network Access Protection reports.
- Check a client log file for a particular
entry.
- Check for the presence of the Network Access
Protection icon on the notification area.
To verify that clients are going into remediation by running Network Access Protection reports:
-
Run one of the following Network Access Protection reports:
- List of non-compliant computers in
remediation from last polling interval
- List of non-compliant computers in
remediation within a specified period
- Summary of non-compliant computers in
remediation from last polling interval
- List of non-compliant computers in
remediation from last polling interval
-
Verify that computers are listed in these reports. If computers are listed, clients are going into remediation. If no computers are listed, clients are either not going into remediation or the latest information is not available from the last polling interval.
To verify that clients are going into remediation by checking a client log file:
-
Locate the client log file %windir%\system32\CCM\Logs\ccmcca.log, and search for the following line: CORE: In Restricted or Probation access state, triggering remediation. If this line exists in the file, that client has gone into remediation. If this line does not exist in the file, that client has not gone into remediation.
To verify that clients are going into remediation using the Network Access Protection icon on the notification area:
-
When a computer undergoes remediation on the restricted network, the Network Access Protection icon will be visible in the notification area, informing users that the computer has restricted network access until required updates are installed..
NoteIf the computer is remediating with full network access for a limited time, the Network Access Protection notification will not appear unless there is a remediation failure or a restart is required.