When deploying DHCP enforcement, you must consider the following in your planning:
Security group for NAP exemptions
NAP health policy servers
Health requirement policies for specific DHCP scopes
DHCP options for NAP clients
DHCP enforcement behavior when the NAP health policy server is not reachable
To exempt DHCP client computers from DHCP enforcement by preventing NAP evaluation at the NAP health policy server, create a security group whose members contain the computer accounts of exempted computers. On the NAP health policy server, create a network policy that grants access and uses the Windows Groups condition set to the security group for the exempted computers ...