Export (0) Print
Expand All
Expand Minimize

How to Configure NAP Evaluation for Software Updates

Applies To: System Center Configuration Manager 2007, System Center Configuration Manager 2007 R2, System Center Configuration Manager 2007 R3, System Center Configuration Manager 2007 SP1, System Center Configuration Manager 2007 SP2

Network Access Protection (NAP) policies in Configuration Manager 2007 define which software updates NAP-capable clients must have by a specified date in order to be compliant. Before you can define a Configuration Manager NAP policy, you must first enable the Network Access Protection client agent and the software updates must be downloaded. Configuration Manager 2007 NAP Policies cannot be created on secondary sites or on a child site if the parent site is enabled for NAP. These sites will inherit the Configuration Manager NAP Policies from the primary or parent site, and these policies cannot be added to, deleted, or modified except on the site on which they were created.

The evaluation of NAP policies can be enabled for software updates while creating the software update deployment using the Deploy Software Updates Wizard or within the software update properties for updates that have been downloaded. NAP evaluation can also be enabled on deployed software updates by creating a new NAP policy.

Use one of the following procedures to enable NAP evaluation for software updates.

To enable NAP evaluation using the Deploy Software Updates Wizard

  1. In the Configuration Manager console, navigate to System CenterConfiguration Manager / Site Database / Computer Management / Software Updates.

  2. Specify the software updates to configure for NAP evaluation, and then click Deploy Software Updates to open the Deploy Software Updates Wizard.

    Software updates can be displayed within the Update Repository, deployment name, and deployment package name console tree nodes. For more information about where to find software updates, see How to Find Software Updates in Configuration Manager.

  3. Follow the wizard pages to the Set Effective Date page, and select Enable NAP evaluation. Specify whether the Configuration Manager NAP policy should become effective as soon as possible or at a specific date and time. Complete the wizard, and click Close.

    noteNote
    If the Set Effective Date page is not present, NAP has not been configured for the site.

  4. When the Deploy Software Updates Wizard completes, the deployment displays in the Deployment Management node. If a deployment template definition was saved, it displays in the Deployment Templates node. If a deployment package was created, it displays in the Deployment Packages node. The Refresh action might be needed on each node for the objects to display.

To enable NAP evaluation for updates in software updates properties

  1. In the Configuration Manager console, navigate to System CenterConfiguration Manager / Site Database / Computer Management / Software Updates.

  2. Specify the software updates to configure for NAP evaluation, and then click Properties to open the properties for the software updates.

    Software updates can be displayed within the Update Repository, deployment name, and deployment package name console tree nodes. For more information about where to find software updates, see How to Find Software Updates in Configuration Manager.

  3. Click the NAP Evaluation tab, and select Enable NAP evaluation. Specify whether the Configuration Manager NAP policy should become effective as soon as possible or at a specific date and time.

    noteNote
    If the NAP Evaluation tab is not present, at least one of the software updates selected has not yet been deployed or NAP has not been configured for the site. All software updates must be downloaded prior to enabling NAP evaluation.

To enable NAP evaluation for updates using the New Policies Wizard

  1. In the Configuration Manager console, navigate to System CenterConfiguration Manager / Site Database /Computer Management / Network Access Protection /.Policies.

  2. Right-click Policies, and then click New Policies to open the New Policies Wizard.

  3. Select the software updates you want to include in the Configuration Manager NAP policy, and then click Next. Only software updates that have been deployed are displayed.

  4. Specify whether the Configuration Manager NAP policy should become effective as soon as possible or at a specific date and time.

  5. Click Finish, and then click Close.

See Also

For additional information, see Configuration Manager 2007 Information and Support.
To contact the documentation team, email SMSdocs@microsoft.com.
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft