Trusted Server Groups Are Not Found

Updated: March 29, 2012

Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2

This event occurs when a Network Access Protection (NAP) client computer does not have trusted server group settings. You can ignore this event if it occurs on a NAP client that is not using the NAP with Internet Protocol security (IPsec) enforcement method, or you can prevent the occurrence of this event by configuring a trusted server group. This event can also occur if trusted server group settings are configured in local policy settings and other NAP client settings are configured in Group Policy.

If a NAP client computer is using the IPsec enforcement method and cannot determine the Health Registration Authority (HRA) configuration, it will be unable to acquire a health certificate and its network access might be restricted. If a NAP client computer is using another enforcement method, this condition will have no effect on network access.

  • NAP client event ID 39: The Network Access Protection Agent was unable to determine which HRAs to request a health certificate from. A network change or if GP is configured, a configuration change will prompt further attempts to acquire a health certificate. Otherwise no further attempts will be made. Contact the HRA administrator for more information.

To resolve this issue, see Event ID 39 – HRA Discovery (

Community Additions