Network Access Protection (Standard 7 Package Reference)
7/8/2014
This package is a Feature Pack in the category Networking. The name of the package as it appears on disk and for use with some command-line tools is WinEmb-Networking-NAP.
Network Access Protection (NAP) provides network administrators with options for ensuring that organizational policies relating to various system health indicators such as operating system updates, virus and malware protection, and firewall security, are satisfied before devices are permitted full access to a network.
The NAP agent service, in addition to verifying that the device is compliant with the health policy, can be used to automatically initiate updates to the device, such as by using Windows Update or other enforcement clients.
See the list of optional, supporting packages for various methods of configuring NAP (for example, by using the Netsh.exe command-line tool, MMC snap-ins, or the NAP user interface) as well as access to enforcement clients such as Windows Update and Internet Protocol Security (IPSec).
Settings
No settings provided.
Services
- Network Access Protection Agent
Dependencies
Package Dependencies
This package depends upon features provided by the following packages:
- .NET Framework 2.0 Client Profile
- Group Policy Management
- Networking Foundation
- Windows Security Center
Group Dependencies
No group dependencies.
Optional Supporting Packages
You can select any number of packages from the following list:
- File and Folder Synchronization
- Microsoft Management Console
- Performance Monitoring
- Shell Controls and UI Support Functions
- System Management Administrative Tools
- Windows Firewall
- Windows Management Instrumentation
- Windows Update User Interface
- Wireless Networking
You can use the optional packages to enable the following functions:
To do this |
Use these packages |
|---|---|
Enable NAP to notify user about device health state using tray icons and show NAP report to the user. |
|
Enable NAP health agent to check whether the firewall settings conform to network policies and determine device health according network policies. |
|
Enable NAP health agent to check whether the device conforms to Windows Update network policies and determine device health according network policies. |
|
Configure NAP and get NAP information using Windows Management Instrumentation (WMI) technology. |
|
Control client NAP settings using Group Policies. |
Common Uses
Notes
On devices using File-Based Write Filter (FBWF) or Enhanced Write Filter with HORM to protect volumes, folders, or files, any changes by system-health enforcement clients might not be persisted after a system restart, at which point the device could be granted only limited network access.
See Also
Tasks
Install Updates on an EWF-Protected Run-Time Image
Service FBWF-Protected Devices