How to Prepare the Site for Network Access Protection Clients
Applies To: System Center Configuration Manager 2007, System Center Configuration Manager 2007 R2, System Center Configuration Manager 2007 R3, System Center Configuration Manager 2007 SP1, System Center Configuration Manager 2007 SP2
Network Access Protection is enabled for a site by enabling the Network Access Protection client agent. Because this is a site-wide setting, consider upgrading and reassigning clients according to whether they support Network Access Protection.
To help you identify which clients support Network Access Protection and which clients are running Windows XP Service Pack 2 and could support Network Access Protection with a later service pack, run the following Network Access Protection reports:
List of computers that could be upgraded to support NAP
List of NAP-capable and NAP-upgradable computers
Additionally, run the following query to find a list of computers that are running Windows XP Service Pack 2 so that you can target these computers to be upgraded with Windows XP Service Pack 3:
Select NapUpgradeableCount from v_NAPSystemInfo.
For information about how to run Network Access Protection reports, see How to Run Network Access Protection Reports.
Deploying Windows XP Service Pack 3 to Support Network Access Protection on the Windows XP Operating System Platform
Windows XP Service Pack 3 can be installed on supported platforms (Windows XP Service Pack 1 and Service Pack 2) by using software updates. Alternatively, download this service pack from the Microsoft Download Center and upgrade clients by using software distribution. Installation of this service pack might require a restart.
For more information about how to deploy software updates to clients, see Administrator Checklist: Configuring Software Updates. For more information about how to distribute software to clients, see Administrator Checklist: Software Distribution Checklist.
|You must start the Network Access Protection service (set, by default, to Manual and not started) and manually start the enforcement clients that you are using in your Network Access Protection environment. This can be achieved with Group Policy. Refer to the Network Access Protection documentation for procedural information about this requirement for Network Access Protection clients.|
For additional information, see Configuration Manager 2007 Information and Support.
To contact the documentation team, email SMSdocs@microsoft.com.