How to Verify Clients are Going into Remediation with Network Access Protection

To verify that the Configuration Manager 2007 clients are going into remediation, you can use any one of the following procedures:

Run Network Access Protection reports.
Check a client log file for a particular entry.
Check for the presence of the Network Access Protection icon on the notification area.

To verify that clients are going into remediation by running Network Access Protection reports:

Run one of the following Network Access Protection reports:
- List of non-compliant computers in remediation from last polling interval
- List of non-compliant computers in remediation within a specified period
- Summary of non-compliant computers in remediation from last polling interval
Verify that computers are listed in these reports. If computers are listed, clients are going into remediation. If no computers are listed, clients are either not going into remediation or the latest information is not available from the last polling interval.

Locate the client log file %windir%\system32\CCM\Logs\ccmcca.log, and search for the following line: CORE: In Restricted or Probation access state, triggering remediation. If this line exists in the file, that client has gone into remediation. If this line does not exist in the file, that client has not gone into remediation.

When a computer undergoes remediation on the restricted network, the Network Access Protection icon will be visible in the notification area, informing users that the computer has restricted network access until required updates are installed..

注意

If the computer is remediating with full network access for a limited time, the Network Access Protection notification will not appear unless there is a remediation failure or a restart is required.