This section provides troubleshooting information to help you resolve issues when you cannot create Configuration Manager NAP policies in the Configuration Manager 2007 console.
Network Access Protection (NAP) is
Not Enabled for the Site
When the Configuration Manager site is not enabled for Network Access Protection, you cannot create Configuration Manager NAP policies.
Solution
Enable Network Access Protection by enabling the Network Access Protection client agent: How to Enable the Network Access Protection Client Agent.
For more information, see About Enabling and Disabling Network Access Protection.
NAP Policy Creation on Secondary
Sites or Child Primary Sites
You cannot create Configuration Manager NAP policies from a secondary site, or if a primary site higher in the hierarchy is enabled for Network Access Protection.
Solution
None. This is by design because Configuration Manager NAP policies flow down the Configuration Manager hierarchy. For more information, see About Network Access Protection in Configuration Manager Hierarchies.
You Do Not Have Permissions to
Create Configuration Manager NAP Policies
You must have appropriate permissions to create Configuration Manager NAP policies.
Solution
Log in as a user that has appropriate permissions, or reconfigure the permissions. For more information, see Network Access Protection Security Rights.
Software Updates Have Not Been
Downloaded or They Are Already Enabled for NAP Evaluation
You can create a Configuration Manager NAP policy only if the software update exists in a software update package (using the software updates feature), or if it doesn't already exist in a Configuration Manager NAP policy.
Solution
To create a software update deployment, see How to Deploy Software Updates.
To verify existing Configuration Manager NAP policies, see How to View Configuration Manager NAP Policies for Network Access Protection.