Export (0) Print
Expand All

Cannot Create Configuration Manager NAP Policies for Network Access Protection

Applies To: System Center Configuration Manager 2007, System Center Configuration Manager 2007 R2, System Center Configuration Manager 2007 R3, System Center Configuration Manager 2007 SP1, System Center Configuration Manager 2007 SP2

This section provides troubleshooting information to help you resolve issues when you cannot create Configuration Manager NAP policies in the Configuration Manager 2007 console.

When the Configuration Manager site is not enabled for Network Access Protection, you cannot create Configuration Manager NAP policies.

Solution

Enable Network Access Protection by enabling the Network Access Protection client agent: How to Enable the Network Access Protection Client Agent.

For more information, see About Enabling and Disabling Network Access Protection.

You cannot create Configuration Manager NAP policies from a secondary site, or if a primary site higher in the hierarchy is enabled for Network Access Protection.

Solution

None. This is by design because Configuration Manager NAP policies flow down the Configuration Manager hierarchy. For more information, see About Network Access Protection in Configuration Manager Hierarchies.

You must have appropriate permissions to create Configuration Manager NAP policies.

Solution

Log in as a user that has appropriate permissions, or reconfigure the permissions. For more information, see Network Access Protection Security Rights.

You can create a Configuration Manager NAP policy only if the software update exists in a software update package (using the software updates feature), or if it doesn't already exist in a Configuration Manager NAP policy.

Solution

To create a software update deployment, see How to Deploy Software Updates.

To verify existing Configuration Manager NAP policies, see How to View Configuration Manager NAP Policies for Network Access Protection.

For additional information, see Configuration Manager 2007 Information and Support.
To contact the documentation team, email SMSdocs@microsoft.com.
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft