NAP - can not make it work.

-

i tired configure nap guide provided on http://www.microsoft.com/downloads/details.aspx?familyid=298ff956-1e6c-4d97-a3ed-7e7ffc4bed32&displaylang=en

 

i did , vista client not seem use of configured features. mean - there no difference in client behaviour there no nap configuration.

i checked option twice, builded second lab, , same situation - done nothing... configured client option via gpo in domain, gpresult shows policies applied. ideas?

hi,

 

before requesting detailed configuration information setup, i'd check common problem causes error code 500.

 

on hra machine, open hra console, right-click certificate authority, , click properties.

 

a common cause of error code 500 that "use standalone certification authority" selected here, using enterprise certification authority. sounds description of problem may have chosen install enterprise ca. if use enterprise ca, must configure hra "use enterprise certifcation authority" , choose authenticated , anonymous certificate template.

 

the system health authentication template should available choice both authenticated , anonymous, assuming published template (right-click certificate templates, point new, , click certificate template issue). please select system health authentication both authenticated , anonymous template.

 

it isn't necessary select different template authenticated , anonymous access, particularly if didn't choose enable anonymous access when installed hra. still need choose anonymous template, won't ever accessed if didn't enable anonymous requests (i.e. health certificates workgroup computers).

 

after selecting enterprise ca , 2 templates, should able restart nap agent , health certificate. please let me know if solves problem.

 

to answer question enabling anonymous requests without reinstalling hra, i'm not sure if can done. may able configure iis manually create web site isapi extension, wouldn't recommend it. better reinstall hra if must enable anonymous requests. again, don't need enable anonymous requests unless want issue health certificates workgroup computers.

 

the event described waiting other services start can happen first time boot up. because nap depends on several other services starting up. problem shouldn't continue happen after computer booted. if does, there may problem 1 of services in security center, or security center service itself.

 

please let me know if problem having resolved configuring hra described.

 

-greg



Windows Server  >  Network Access Protection



Comments

Post a Comment

Popular posts from this blog

Edit Group Policy

-
i have pc has power settings pushed out default domain policy in ad environment. of course on local machine "some settings managed system adminstrator". the machine temporarily no longer in contact domain controller (it's been physically moved , not on same network now) can't updated gpo settings. i believe if edit local group policy won't make difference because of group policy processing , precedence. since it's temporary away ad network, still want use settings of ad user. is there somewhere in registry stored can edit power plan manually until can sync domain? (i need prevent sleeping while plugged in - it's set 1 hour) thanks! allen crist i found site: http://gpsearch.azurewebsites.net/#7916 i able add policy to hkey_local_machine\software\policies\microsoft\power using specs found on site. looks solved issue. i'll report if didn't. thanks! allen crist ...
Read more

Hyper-V VM not reaching OS 'Logon' screen

-
i trying migrate vm vmware hyper-v. so far have done following (seemingly successfully): prepare vmware vm conversion hyper-v format (vhd) within vmware workstation 8.0 environment following steps guide: http://social.technet.microsoft.com/forums/en/winserverhyperv/thread/ef8c12f7-c45d-442e-9a30-c43cd87df3b3   (i.e. remove vm tools, add new ide hard disk…) use vmdk2vhd application convert individual vmdk files vhd ones create new vm in hyper-v exporting in 3 newly converted vhd files at point have checked settings , powered on vm in hyper-v find although windows begins load expected manages reach screen prior login screen saying either of following messages: “windows starting up…” “the active directory rebuilding indices… please wait” to knowledge, albeit limited in area, vm should present me login screen since appears in vmware. if start vm in safe mode can login not desired affect. below details of vm: operating system: windows server 2003 (enterprise edit...
Read more

DNS question...

-
i new setting dns server....my domain name expl. "domain.com"....i set "a" record in forward lookup for  www.domain.com itself...."server's local ip"....i've added no other zones , i seem able resolve names except own....www.domain.com.....also, do i put my isp's dns ip's....for external dns's server can't resolve?....forwarding or in nic setup?......i want setup in my dns server don't have include them on client side..... thanks mark     not put isp dsn server address in settings on nic dc or clients. should point local dns server on dc. set dns forward public dns, such isp. bill Windows Server  >  Network Infrastructure Servers
Read more