Before any deployment of NAP can begin, inventory the workstation and server health requirements and determine how draconian your enforcement of those policies should be. Remember, however, that NAP isn’t just about enforcement, it is also about remediation. The key to a successful deployment is that your solution not only includes the enforcement deemed appropriate for your environment, but also the ability to move the client from non-compliance to compliance. Before you install and test NAP, it is important that you understand and make decisions about the settings that you will report on and enforce. A solid understanding of Microsoft security update ranking is essential to properly set NAP policies.