14.4. Phasing NAP into a Configuration Manager 2007 Environment

Most of Microsoft's deployment white papers and documentation refer to three phases of a NAP deployment. These are (in Microsoft's terms) reporting mode, deferred enforcement, and full enforcement.

Considering that NAP gives administrators the ability to quarantine machines from their network, NAP is not something you would simply "flip the switch on" for. With Configuration Manager 2007 and the ability to enforce NAP on a patch-by-patch basis, deploying NAP in these three phases is something very valuable. Let's look at each of these phases and how it relates to Configuration Manager:

Reporting mode This is the first recommended phase of a NAP deployment, and it allows administrators ...

Get Mastering System Center Configuration Manager 2007 R2 now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.