This section provides troubleshooting information to help you resolve issues related to installing the System Health Validator Point in Configuration Manager 2007.
Installation on Microsoft Windows
Server 2003 or Windows 2000 Server
The Configuration Manager System Health Validator point must be installed on Microsoft Windows Server 2008, running the Network Policy Server role. Installation on other operating systems is not supported.
Solution
None. The requirement for Windows Server 2008 is one of the prerequisites for Network Access Protection. For more information, see Prerequisites for Network Access Protection.
Installation on a Workgroup
Server
Although the installation of the Configuration Manager System Health Validator point will complete on a workgroup server, all Configuration Manager site systems must be installed on computers that are a member of a Windows 2000 or Windows 2003 Active Directory domain as a member server (recommended) or domain controller (not recommended). Running any site system on workgroup computers is not supported in Configuration Manager 2007.
For more information:
Solution
Install the System Health Validator point on a member server (recommended) or a domain controller (not recommended) that is in a Windows Active Directory domain.
Network Policy Server is Not
Running
The installation of the System Health Validator point requires that the Network Policy Server role is installed and running.
Solution
Add the role Network Policy and Access Services to the server running Windows Server 2008, and then ensure that the following service is running: Internet Authentication Service.
The Network Policy Server is in a
Different Domain from the Site Server
By default, the site server computer account is used to install a site system role. If this account cannot be authenticated on the computer on which you are installing the System Health Validator point, installation will fail until you configure an installation account.
Solution
Specify an installation account. For procedural information, see How to Configure the System Health Validator Point Installation Account.
Additionally, in this scenario you must also configure the location of the health state reference and the accounts for publishing and querying the health state references. For more information, see the following:
Perimeter Devices Block Installation
Packets
If perimeter devices such as firewalls and routers are configured to restrict network traffic between the site server and the computer on which you are installing the System Health Validator point, these must be reconfigured to allow the required packets.
Solution
Configure these devices for the ports required. For information, see Determine the Ports Required by Firewalls to Support Network Access Protection.
An Error Condition Prevents
Installation
There are many miscellaneous reasons why an installation can fail.
Solution
Identify the problem and then resolve the problem indicated.
To identify the problem, follow these steps:
- Reference the setup log on the Network Policy
Server for installation errors. For more information, see Log Files for Network
Access Protection.
- Reference the Application Event log on the
Network Policy Server for installation errors.