DHCP: An NPS (Network Policy Server) should be installed if NAP (Network Access Protection) is enabled

  • Article

Applies To: Windows Server 2008 R2, Windows Server 2012

This topic is intended to address a specific issue identified by a Best Practices Analyzer scan. You should apply the information in this topic only to computers that have had the Dynamic Host Configuration Protocol Best Practices Analyzer run against them and are experiencing the issue addressed by this topic. For more information about best practices and scans, see Best Practices Analyzer (https://go.microsoft.com/fwlink/?LinkId=122786).

Operating System

Windows Server 2008 R2, Windows Server 2012

Product/Feature

Dynamic Host Configuration Protocol (DHCP)

Severity

Warning

Category

Operation

Issue

An NPS server is either not installed or is unreachable.

Impact

Network Access Protection is not enforced by the DHCP server which may result in non-compliant clients gaining, or complaint clients being denied access to the network.

Resolution

Install NPS or in the case that NPS is already installed, ensure that the service is running.

You can use this procedure to install Network Policy Server (NPS) by using the Add Roles Wizard. NPS is a role service of the Network Policy and Access Services server role.

To complete this procedure, you must be a member of the Administrators group.

To install NPS

  1. Do one of the following:

    • In Initial Configuration Tasks, in Customize This Server, click Add roles. The Add Roles Wizard opens.

    • Click Start, and then click Server Manager. In the left pane of Server Manager, click Roles, and in the details pane, in Roles Summary, click Add Roles. The Add Roles Wizard opens.

  2. In Before You Begin, click Next.

Note

The Before You Begin page of the Add Roles Wizard is not displayed if you have previously selected Do not show this page again when the Add Roles Wizard was run.

  1. In Select Server Roles, in Roles, select Network Policy and Access Services, and then click Next.

  2. In Network Policy and Access Services, click Next.

  3. In Select Role Services, in Role Services, select Network Policy Server, and then click Next.

  4. In Confirm Installation Selections, click Install.

  5. In Installation Results, review your installation results, and then click Close.

Additional references

For updated detailed IT pro information about NPS and DHCP, see the Windows Server 2008 R2 documentation on the Microsoft TechNet Web site.