Planning and Design Considerations

When deploying DHCP enforcement, you must consider the following in your planning:

  • Security group for NAP exemptions

  • DHCP servers

  • NAP health policy servers

  • Health requirement policies for specific DHCP scopes

  • DHCP options for NAP clients

  • DHCP enforcement behavior when the NAP health policy server is not reachable

  • NAP clients

Security Group for NAP Exemptions

To exempt DHCP client computers from DHCP enforcement by preventing NAP evaluation at the NAP health policy server, create a security group whose members contain the computer accounts of exempted computers. On the NAP health policy server, create a network policy that grants access and uses the Windows Groups condition set to the security group for the exempted computers ...

Get Windows Server® 2008 Networking and Network Access Protection (NAP) now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.