Network Access Protection (NAP) policies in Configuration Manager 2007 define which software updates NAP-capable clients must have by a specified date in order to be compliant. Before you can define a Configuration Manager NAP policy, you must first enable the Network Access Protection client agent and the software updates must be downloaded. Configuration Manager 2007 NAP Policies cannot be created on secondary sites or on a child site if the parent site is enabled for NAP. These sites will inherit the Configuration Manager NAP Policies from the primary or parent site, and these policies cannot be added to, deleted, or modified except on the site on which they were created.

The evaluation of NAP policies can be enabled for software updates while creating the software update deployment using the Deploy Software Updates Wizard or within the software update properties for updates that have been downloaded. NAP evaluation can also be enabled on deployed software updates by creating a new NAP policy.

Use one of the following procedures to enable NAP evaluation for software updates.

To enable NAP evaluation using the Deploy Software Updates Wizard

  1. In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Computer Management / Software Updates.

  2. Specify the software updates to configure for NAP evaluation, and then click Deploy Software Updates to open the Deploy Software Updates Wizard.

    Software updates can be displayed within the Update Repository, deployment name, and deployment package name console tree nodes. For more information about where to find software updates, see How to Find Software Updates in Configuration Manager.

  3. Follow the wizard pages to the Set Effective Date page, and select Enable NAP evaluation. Specify whether the Configuration Manager NAP policy should become effective as soon as possible or at a specific date and time. Complete the wizard, and click Close.

    Note
    If the Set Effective Date page is not present, NAP has not been configured for the site.

  4. When the Deploy Software Updates Wizard completes, the deployment displays in the Deployment Management node. If a deployment template definition was saved, it displays in the Deployment Templates node. If a deployment package was created, it displays in the Deployment Packages node. The Refresh action might be needed on each node for the objects to display.

To enable NAP evaluation for updates in software updates properties

  1. In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Computer Management / Software Updates.

  2. Specify the software updates to configure for NAP evaluation, and then click Properties to open the properties for the software updates.

    Software updates can be displayed within the Update Repository, deployment name, and deployment package name console tree nodes. For more information about where to find software updates, see How to Find Software Updates in Configuration Manager.

  3. Click the NAP Evaluation tab, and select Enable NAP evaluation. Specify whether the Configuration Manager NAP policy should become effective as soon as possible or at a specific date and time.

    Note
    If the NAP Evaluation tab is not present, at least one of the software updates selected has not yet been deployed or NAP has not been configured for the site. All software updates must be downloaded prior to enabling NAP evaluation.

To enable NAP evaluation for updates using the New Policies Wizard

  1. In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Computer Management / Network Access Protection /.Policies.

  2. Right-click Policies, and then click New Policies to open the New Policies Wizard.

  3. Select the software updates you want to include in the Configuration Manager NAP policy, and then click Next. Only software updates that have been deployed are displayed.

  4. Specify whether the Configuration Manager NAP policy should become effective as soon as possible or at a specific date and time.

  5. Click Finish, and then click Close.

See Also