Creating the Secure Managed Desktop: Using Group Policy, SoftGrid, Microsoft Deployment Toolkit, and Other Management Tools
by Jeremy Moskowitz
9.4. Final Thoughts
NAP is great. It keeps the unhealthy kids off your network until they can be proven fit. Again, it doesn't guarantee that there won't be an outbreak of some kind. But it does represent that a minimum baseline of health is achieved before computers run through the halls of your network.
In this chapter, we used the built-in SHA and SHV that ship with Windows. And, again, together they can do some neat tricks, like figure out if your clients have the firewall turned on or not or if they've got Antivirus software running. But it doesn't do things like check to see if the latest DLL is present, a Registry punch has been made, or a certain file is present. That's because NAP is more of a framework for neat technology. Introducing ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access