This section provides troubleshooting information to help you resolve issues when you cannot create Configuration Manager NAP policies in the Configuration Manager 2007 console.

Network Access Protection (NAP) is Not Enabled for the Site

When the Configuration Manager site is not enabled for Network Access Protection, you cannot create Configuration Manager NAP policies.

Solution

Enable Network Access Protection by enabling the Network Access Protection client agent: How to Enable the Network Access Protection Client Agent.

For more information, see About Enabling and Disabling Network Access Protection.

NAP Policy Creation on Secondary Sites or Child Primary Sites

You cannot create Configuration Manager NAP policies from a secondary site, or if a primary site higher in the hierarchy is enabled for Network Access Protection.

Solution

None. This is by design because Configuration Manager NAP policies flow down the Configuration Manager hierarchy. For more information, see About Network Access Protection in Configuration Manager Hierarchies.

You Do Not Have Permissions to Create Configuration Manager NAP Policies

You must have appropriate permissions to create Configuration Manager NAP policies.

Solution

Log in as a user that has appropriate permissions, or reconfigure the permissions. For more information, see Network Access Protection Security Rights.

Software Updates Have Not Been Downloaded or They Are Already Enabled for NAP Evaluation

You can create a Configuration Manager NAP policy only if the software update exists in a software update package (using the software updates feature), or if it doesn't already exist in a Configuration Manager NAP policy.

Solution

To create a software update deployment, see How to Deploy Software Updates.

To verify existing Configuration Manager NAP policies, see How to View Configuration Manager NAP Policies for Network Access Protection.

See Also