Export (0) Print
Expand All

The System Health Validator Point Will Not Install or is Reporting Errors for Network Access Protection

Applies To: System Center Configuration Manager 2007, System Center Configuration Manager 2007 R2, System Center Configuration Manager 2007 R3, System Center Configuration Manager 2007 SP1, System Center Configuration Manager 2007 SP2

This section provides troubleshooting information to help you resolve issues related to installing the System Health Validator Point in Configuration Manager 2007.

The Configuration Manager System Health Validator point must be installed on Microsoft Windows Server 2008, running the Network Policy Server role. Installation on other operating systems is not supported.

Solution

None. The requirement for Windows Server 2008 is one of the prerequisites for Network Access Protection. For more information, see Prerequisites for Network Access Protection.

Although the installation of the Configuration Manager System Health Validator point will complete on a workgroup server, all Configuration Manager site systems must be installed on computers that are a member of a Windows 2000 or Windows 2003 Active Directory domain as a member server (recommended) or domain controller (not recommended). Running any site system on workgroup computers is not supported in Configuration Manager 2007.

For more information:

Solution

Install the System Health Validator point on a member server (recommended) or a domain controller (not recommended) that is in a Windows Active Directory domain.

The installation of the System Health Validator point requires that the Network Policy Server role is installed and running.

Solution

Add the role Network Policy and Access Services to the server running Windows Server 2008, and then ensure that the following service is running: Internet Authentication Service.

By default, the site server computer account is used to install a site system role. If this account cannot be authenticated on the computer on which you are installing the System Health Validator point, installation will fail until you configure an installation account.

Solution

Specify an installation account. For procedural information, see How to Configure the System Health Validator Point Installation Account.

Additionally, in this scenario you must also configure the location of the health state reference and the accounts for publishing and querying the health state references. For more information, see the following:

If perimeter devices such as firewalls and routers are configured to restrict network traffic between the site server and the computer on which you are installing the System Health Validator point, these must be reconfigured to allow the required packets.

Solution

Configure these devices for the ports required. For information, see Determine the Ports Required by Firewalls to Support Network Access Protection.

There are many miscellaneous reasons why an installation can fail.

Solution

Identify the problem and then resolve the problem indicated.

To identify the problem, follow these steps:

  • Reference the setup log on the Network Policy Server for installation errors. For more information, see Log Files for Network Access Protection.

  • Reference the Application Event log on the Network Policy Server for installation errors.

For additional information, see Configuration Manager 2007 Information and Support.
To contact the documentation team, email SMSdocs@microsoft.com.
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft