A Configuration Manager Network Access Protection (NAP) policy in Configuration Manager 2007 defines which software updates a NAP-capable client must have by a specified date to be compliant. Before you can define a Configuration Manager NAP policy, you must first enable the Network Access Protection client agent and the software update must be downloaded with the software updates feature.

Note
You cannot create Configuration Manager NAP policies on secondary sites or on a child site if the parent site is enabled for Network Access Protection. These sites will inherit Configuration Manager NAP policies from the primary or parent site, and these policies cannot be added to, deleted, or modified except on the site on which they were created.

You can create a Configuration Manager NAP policy in a number of ways:

Additionally, if you have created software updates search folders, you can modify the properties of software updates that are displayed in the search folders.

To help you decide which procedure to use when creating Configuration Manager NAP policies, see Decide How To Create Configuration Manager NAP Policies for Network Access Protection.

To create a Configuration Manager NAP policy with the New Policies Wizard

  1. In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Computer Management / Network Access Protection / Policies.

  2. Right-click Policies and then click New Policies to launch the New Policies Wizard.

  3. Select the software updates you want to include in the Configuration Manager NAP policy, and then click Next.

  4. Configure the effective date by selecting either As soon as possible or the Date and time and selecting the date and time that the policy will become effective.

  5. Click Finish, and then click Close.

To create a Configuration Manager NAP policy with the Deploy Software Update Wizard

  1. In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Computer Management / Software Updates / Update Repository.

  2. Select the software updates you want to deploy, right-click, and select Deploy Software Updates to launch the Deploy Software Update Wizard. For more information about finding software updates in the Configuration Manager console, see How to Find Software Updates in Configuration Manager.

  3. Select the options you want to create for your software update deployment, and click Next until you come to the page Set NAP Evaluation.

  4. Click Enable NAP evaluation, and then configure the effective date either by selecting As soon as possible or selecting Date and time and specifying the date and time that the policy will become effective.

  5. Click Next, Finish, and Close to complete the wizard.

To create a Configuration Manager NAP policy by modifying a software update in the update repository

  1. In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Computer Management / Software Updates / Update Repository.

  2. Find the software update that you want to configure for NAP evaluation, right-click, and then click Properties.

  3. On the NAP Evaluation tab, click Enable NAP evaluation, and then configure the effective date either by selecting As soon as possible or selecting Date and time and specifying the date and time that the policy will become effective.

  4. Click OK.

To create a Configuration Manager NAP policy by modifying a software update in a deployment package

  1. In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Computer Management / Software Updates / Deployment Packages / <deployment package name> / Software Updates.

  2. Right-click the software update that has been configured for NAP evaluation and that you want to change the effective date for, and then click Properties.

  3. On the NAP Evaluation tab, click Enable NAP evaluation, and then configure the effective date either by selecting As soon as possible or selecting Date and time and specifying the date and time that the policy will become effective.

  4. Click OK.

To configure the effective date by modifying a software update in a software update deployment

  1. In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database / Computer Management / Software Updates / Deployment Management / <deployment name> / Software Updates.

  2. Right-click the software update that has been configured for NAP evaluation and that you want to change the effective date for, and then click Properties.

  3. On the NAP Evaluation tab, click Enable NAP evaluation, and then configure the effective date either by selecting As soon as possible or selecting Date and time and specifying the date and time that the policy will become effective.

  4. Click OK.

See Also