Checklist: Deploy SHAs and SHVs

  • Article

Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2

This parent checklist includes cross-reference links to important concepts about system health agents (SHAs) and system health validators (SHVs). It also contains links to subordinate checklists that will help you complete the tasks that are required to implement this design.

Note

Complete the tasks in this checklist in order. When a reference link takes you to a conceptual topic or to a subordinate checklist, return to this topic after you review the conceptual topic or you complete the tasks in the subordinate checklist so that you can proceed with the remaining tasks in this checklist.

Checklist: Deploy SHAs and SHVs

  Task Reference

Review concepts and examples for deploying health requirements.

NAP Client Computers

Stages of a NAP Deployment

Install SHVs on NAP health policy servers and deploy SHAs to client computers.

Choose a Compliance Strategy

System Health Validators

Configure a health policy to use the new SHV.

Note
Network Policy Server (NPS) will report client health from all SHAs that are enabled in a health policy. You can also configure a network policy with this health policy condition, but this is not required if an existing network policy already matches NAP client access requests. When a client requests network access, it will provide health status for all installed SHAs that are enabled in NPS health policies.

Health Policies

Configure NAP reports to provide compliance data for the new health requirements.

Track Compliance with Security Policies

NAP Reporting

Configure network policies to use the new health requirement in deferred enforcement mode.

Network Policies

Configure Network Policy for Deferred Enforcement

Configure network policies to use the new health requirement in full enforcement mode.

Configure Network Policy for Full Enforcement