Comment Feed for NAP and Forefront (Media on TechNet Edge)

Re: NAP and Forefront

JR Black — Tue, 20 May 2008 02:29:02 GMT

How can this help me detect if wireless cards are active on any wired host or otherwise detect all wireless NICs that are directly connected to my Ethernet? That would be a boon feature, if even only limited to detecting docked Windows laptops with active/bridged wireless adapters.

Thanks,

JR

PS Great vids on the NAP topic.

Re: NAP and Forefront

Adam Bomb — Fri, 14 Mar 2008 00:51:06 GMT

David just let me know that there are some public resources now available for Forefront Integration with NAP.

To learn more about the Kit, sign in to the Microsoft Connect Web site. Or, to join the program, click here.

-ac

Re: NAP and Forefront

Jeff Sigman — Thu, 06 Mar 2008 22:41:19 GMT

Exactly Neil. The idea is to fix people up and hopefully they never even knew we were working on their machine (making it compliant). Bottom-line is NAP does not want to generate helpdesk calls. :->

- Jeff

Re: NAP and Forefront

Jeff Sigman — Thu, 06 Mar 2008 22:36:57 GMT

Thanks Josh! :->

Great question about VPN. NAP supports VPN in XP and Vista (as the client) and the server is built-in to Server 2008.

The great thing about NAP/VPN is it is applied on a per-connection basis at the server itself. This means, when you VPN in your “compliance” is checked right away. Until you are “compliant”, your connection is limited at the VPN server. As soon as the client matches policy the restrictions are lifted at the VPN server and the end-user may not even have noticed his connection was limited.

Let me know if I can further clarify anything.

- Jeff

Re: NAP and Forefront

Neil Hutson — Wed, 05 Mar 2008 04:53:23 GMT

This is very cool, especially the auto remediation for people who do not know what they have to do to get their PC back in policy...

Re: NAP and Forefront

Josh Bolling — Wed, 05 Mar 2008 04:42:43 GMT

Great video, Jeff! It was quite informative and something I'd wanted to see for quite some time. I am curious about one thing though:

How are health policies applied when assessing machines connected via a VPN? I know Microsoft has taken GPO processing out of the Winlogon process and is now relying on NLA to make the determination as to what policies to apply. Does NAP leverage the same model when remediating remote clients? Thanks!

+Josh (Wa)

Re: NAP and Forefront

Jeff Sigman — Tue, 04 Mar 2008 17:59:53 GMT

Thanks for getting this posted Adam. I am super excited to give a sneak peak of Forefront's tight integration with NAP.

Please feel free to post any questions here and I will do my best to get them answered!

Blog, FAQ, Forum, MSDN, Site and even my Personal Blog.