Software updates to be included in Configuration Manager 2007 Network Access Protection (NAP) evaluation are not necessarily evaluated as soon as the client receives the Configuration Manager NAP policy, but at the effective date configured in the policy. The effective date is the time the NAP policy actually becomes active, and can be configured for "As soon as possible" or a specified date and time.
On the effective date, the client will include the selected software update when evaluating its statement of health. The effective date is in Coordinated Universal Time (UTC).
You can set the effective date in the following places:
- When creating a Configuration Manager 2007
NAP policy with the New Policies Wizard.
- When creating a software deployment with the
Deploy Software Update Wizard.
- Modifying a Configuration Manager 2007 NAP
policy.
- Modifying the properties of a software update
in the update repository.
- Modifying the properties of a software update
in a software update deployment package.
- Modifying the properties of a software update
in a software update deployment.
- Additionally, if you have created software
updates search folders, you can modify the properties of software
updates that are displayed in the search folders.
To configure the effective date when creating a Configuration Manager NAP policy with the New Policies Wizard:
-
In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Computer Management / Network Access Protection / Policies.
-
Right-click Policies, and then click New Policies to launch the New Policies Wizard.
-
Select the software updates you want to include in the NAP policy, and then click Next.
-
Configure the effective date either by selecting As soon as possible or selecting Date and time and specifying the date and time that the policy will become effective.
-
Click Finish, and then click Close.
To configure the effective date when creating a software update deployment with the Deploy Software Update Wizard:
-
In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Computer Management / Software Updates / Update Repository.
-
Select the software updates you want to deploy, right-click, and select Deploy Software Updates to launch the Deploy Software Update Wizard. For more information about finding software updates in the Configuration Manager console, see How to Find Software Updates in Configuration Manager.
-
Select the options you want to create for your software update deployment, and click Next until you come to the page Set NAP Evaluation.
-
Click Enable NAP evaluation, and then configure the effective date either by selecting As soon as possible or selecting Date and time and specifying the date and time that the policy will become effective.
-
Click Next, Finish, and Close to complete the wizard.
To configure the effective date by modifying a Configuration Manager NAP policy:
-
In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Computer Management / Network Access Protection / Policies.
-
Right-click the NAP policy that contains the effective date you want to change, and then click Properties.
-
On the General tab, modify the effective date either by selecting As soon as possible or selecting Date and time and specifying the date and time that the policy will become effective.
-
Click OK.
To configure the effective date by modifying a software update in the Update Repository:
-
In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Computer Management / Software Updates / Update Repository.
-
Find the software update that has been configured for NAP evaluation, right-click, and then click Properties.
-
On the NAP Evaluation tab, modify the effective date either by selecting As soon as possible or selecting Date and time and specifying the date and time that the policy will become effective.
-
Click OK.
To configure the effective date by modifying a software update in a deployment package:
-
In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Computer Management / Software Updates / Deployment Packages / <deployment package name> / Software Updates.
-
Right-click the software update that has been configured for NAP evaluation and that you want to change the effective date for, and then click Properties.
-
On the NAP Evaluation tab, modify the effective date either by selecting As soon as possible or selecting Date and time and specifying the date and time that the policy will become effective.
-
Click OK.
To configure the effective date by modifying a software update in a software update deployment:
-
In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Computer Management / Software Updates / Deployment Management / <deployment name> / Software Updates.
-
Right-click the software update that has been configured for NAP evaluation and that you want to change the effective date for, and then click Properties.
-
On the NAP Evaluation tab, modify the effective date either by selecting As soon as possible or selecting Date and time and specifying the date and time that the policy will become effective.
-
Click OK.
See Also
Tasks
How to Configure Search Folders for Software UpdatesConcepts
About Folders and Search FoldersAbout the NAP Effective Date in Network Access Protection
About Enforcing Compliance with Network Access Protection
About NAP Evaluation in Network Access Protection
About Configuration Manager NAP Policies in Network Access Protection