Microsoft Network Access Protection (NAP)

Microsoft Network Access Protection uses NAP enforcement points, computers or network devices that include:

• Virtual private network servers
• IEEE 802.1X-capable switches
• Network access control
• Dynamic Host Configuration Protocol servers
• Health registration authorities

However, these computers or network devices must be using Windows Server 2008, or the R2 version, which are capable of storing client computer health requirement policies and evaluating compliance using the Remote Authentication Dial-In User Service (RADIUS) protocol (to be replaced with Diameter, an improved but similar protocol) that provides centralized authentication, authorization and accounting management for client computers. If in noncompliance, the protocols will place the client computer on a restricted network. This is a subset of the Intranet (the corporate network), which contains resources to help correct the client computer. After remediation, the client computer may again be given a new evaluation.