Network Access Protection is another tool in your arsenal to protect your networks. With it, you have the ability to make sure your defenses are on, stay on, and are up to date. NAP also provides you the tools to help make remediation of any problems automatic.
Your clients needs to have several configuration changes made to the in order to respond to NAP. They are:
- Security Center must be turned on.
- The NAP Service must be running.
- The proper NAP Enforcement Client must be enabled.
You can achieve this using group policy. Just make sure this GPO is applied to all your clients.
Security Center: Computer Configuration \ Policies \ Administrative Templates \ Windows Components \ Security Center \ Turn on Security Center (Domain PCs Only). Set this object to Enabled.
NAP Service: Computer Configuration \ Policies \ Windows Settings \ System Services \ Network Access Protection Agent. Check Define the Policy and then select Automatic.
NAP Enforcement Client: Computer Configuration \ Policies \ Windows Settings \ Security Settings \ Network Access Protection \ NAP Configuration \ Enforcement Clients. Double Client the Enforcement Client you will be setting up and Enable it.