Share via


Constraints Properties

Applies To: Windows Server 2008, Windows Server 2008 R2

Constraints are additional network policy parameters that are optional. Constraints differ from network policy conditions in one substantial way: when a condition does not match a connection request, NPS continues to evaluate other configured network policies in search of a match for the connection request, but when a constraint does not match a connection request, NPS does not evaluate additional network policies; NPS rejects the connection request and the user or computer is denied network access.

Following are the constraints that you can configure in a network policy:

  • Authentication methods

    Allows you to specify the authentication methods that are required for the connection request to match the network policy.

  • Idle timeout

    Allows you to specify the maximum time, in minutes, that the network access server can remain idle before the connection is disconnected.

  • Session timeout

    Allows you to specify the maximum amount of time, in minutes, that a user can be connected to the network.

  • Called station ID

    Allows you to specify the telephone number of the dial-up server that clients are allowed to use to access the network.

  • Day and time restrictions

    Allows you to specify when users are allowed to connect to the network.

  • NAS port type

    Allows you to specify the access media types that are allowed for users to connect to the network.