9.3. Troubleshooting NAP
NAP troubleshooting isn't a no-brainer. By its very definition, NAP is meant to keep people out of your network. And discovering why they're out of your network can be difficult. There are several areas you can check to get to the bottom of NAP woes:
Group Policy RSoP
Client logs
Server logs
Tracing logs
The NPS server configuration
However, before you even jump into logging again, I heartily recommend that you check out the obvious stuff that I already described in the "NAP Clients in a Domain-Joined Environment" section (the same goes for a nondomain joined client):
Ensure that the NAP Service is running on the client.
Do a Quick NAP Agent Status Check (ipconfig /all).
Do a Quick NAP Enforcement client check.
Do a Quick NAP ...
Get Creating the Secure Managed Desktop: Using Group Policy, SoftGrid, Microsoft Deployment Toolkit, and Other Management Tools now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.