NAP & SCCM auto remediation problem
we having problem auto-remediation xp sp3 , vista clients.
recently upgraded our dc's server 2008 r2.
i testing nap when our dc's server 2003 , able step step lab working.
however, after upgrading server 2008 r2, nap stopped working.
nap , dhcp installed on seperate server 2008 sp2 server.
i have enabled auto remediation on non-compliant policy on nap server.
on client, have nap agent, dhcp enforcement, , security center enabled.
when run napstat, message tells me computer compliant.
however client not compliant (i manually disabled windows firewall on it).
when had working before, re-enable windows firewall itself.
the error in event viewer
event id : 30
the system health agent 79745 has returned error code failurecategory client component.
can me?
i can help, , can attempt to get others involved if necessary. if prefer on email can send me mail @ greglin@online.microsoft.com (remove "online" email address email me, added prevent spam bots).
a topic wrote that might understand network policies little better here: http://technet.microsoft.com/en-us/library/dd125310(ws.10).aspx
this topic explains how use different health policies network policy. can have policy says client must pass policy, pass both policies, or pass specific policy. flexible, thing keep in mind first policy matched 1 takes effect. in other words, if have policy says client must match health policy a , later have 1 says client must match both health policy , health policy b, no client ever match second network policy - because match first network policy , policy processing stop. reason, must order network policies generic ones last. hope makes sense.
-greg
Windows Server > Network Access Protection
Comments
Post a Comment