Network Access Protection (NAP)

Latest news from the Network Access Protection (NAP) team at Microsoft.

Network Access Protection (NAP)

  • What OS’es should NAP support?

    We visit many customers and partners around the world. One thing we hear consistently is “NAP client enforcement MUST BE SUPPORTED on XP”. Which OS’es would block / hinder your NAP deployments if they weren’t supported? Any nice-to-have’s (non-blocking...
  • Let's get some NAP questions and comments folks!

    I re-enabled "Allow Anonymous Users to Comment" on the NAP blog. I was talking to my wife this evening about how I don't get a lot of interaction from folks on the NAP blog and she said "that's because you have anonymous comments disabled." "Oh", I...
  • XP NAP Client RTMs!!!

    It’s official! The NAP Client for XP, which is included in Windows XP Service Pack 3, has officially released to manufacturing today . I am over the moon. Man, it is good to have this released! In case you haven’t read my MANY posts on this topic...
  • Network Access Protection Client for Windows XP SP2 – Beta 3 Release

    I am pleased to announce the immediate availability of the Network Access Protection (NAP) Client for Windows XP SP2 – Beta 3 (February 12 th , 2007) to all Longhorn Server Beta customers. You may download it now from MSConnect . The previous release...
  • Go ahead, be a {hero}

    If you can believe it, I have been working on “Longhorn” for five years - pouring my blood, sweat and tears {of joy} into this product. We are LAUNCHING Windows Server 2008 this week! Go ahead, be a {hero}.
  • NAP demystified (hopefully)

    As I learned at Tech Ed 2007, Microsoft NAP still has two large misconceptions out in the world: 1. NAP is solely based on DHCP technology - 100% FALSE 2. Deploying NAP requires a complete "rip and replace" of your existing AD/Server infrastructure...
  • NAP 802.1X Configuration Walkthrough – Part 3

    This is a continuation from Part 1 and Part 2 . Step 3 – NAP Clients, it’s just too easy NAP can be configured from the command-line, the MMC (except on XP SP3) and of course Group Policy (GP). Since this is a workgroup scenario, I am going to...
  • 802.1x NAP Enforcement

    In my last post I committed to coming back and giving you a more information on the many enforcement options available with Network Access Protection (VPN, DHCP, IPSEC, 802.1x). With that in mind I thought I would start with 802.1x based Network...
  • Reminder: NAP TechNet Chat today!

    This is a friendly reminder that we are hosting a NAP chat today (9/14/2006) at 2:30 P.M. Pacific time. Several of us from the engineering team will be participating as will our General Manager, Mark Ashida. It should be a great chat and a lot of fun...
  • What client health checks should we add to NAP?

    In the Vista / Longhorn Server timeframe, the included Windows System Health Agent will have the ability to restrict client network access based on the following Windows Security Center features: Firewall is enabled for all interfaces Antivirus...
  • NAP Client for Windows XP Q and A

    Q: What is Network Access Protection Client for Windows XP? A: Network Access Protection Client for Windows XP is just what it sounds like, it is the NAP client that Microsoft will release for Windows XP. Q: What operating systems will be supported...
  • NAP’s first day at RSA 2007

    Well folks, NAP IS REAL. How can I say this when we haven’t shipped Longhorn Server yet? :-> Well, we have 45 out of our 100 partners at RSA. 9 of these partners were in a special NAP Partner Pavilion showing their working products fully integrated...
  • NAP Longhorn Beta 3 Webcast

    I recorded an offline webcast on May 17 th 2007 in order to show off NAP in Longhorn Server Beta 3. I also wanted to make sure I made up for my failed attempt two days earlier where I experienced technical difficulties with LiveMeeting. This offline demo...
  • Microsoft Press says "NAP the WORLD"

    Microsoft Press is proud to announce the publication of the following book on January 9, 2008: Windows Server® 2008 Networking and Network Access Protection (NAP) By Joseph Davies and Tony Northrup with the Microsoft Networking Team ...
  • 2008 - The year of NAP

    This is my first blog post of the year, and a video blog post no less, kicking off the YEAR OF NAP! Watch the video and give me a ton of feedback (please). Video: NAP Video Blog: 2008 - The year of NAP Talk to you again soon, Jeff Sigman Senior...
  • WinStock 2007

    I had a great time this past week talking to the visiting testers from the Longhorn Beta program. It is a very diverse set of people from across the world who test our software and provide feedback without any pay! On their own dime, they flew out to...
  • XP NAP Rude Q and A

    Since I spend nearly 1/3 of my week answering (or ignoring :->) emails about the XP NAP Client, I thought it might be smart to give a very concise Q&A. Here goes: Questions Jeff’s (brilliant) Answers How do I get...
  • Exclusive Video! NAP + Forefront Client Security (FCS)

    I recorded a video earlier today because of how excited I was to show off the latest development in the world of NAP. The NAP team has worked directly with the Solutions Accelerators team as well as the Forefront team to bring you integration between NAP and Forefront Client Security (FCS) 1.0. Once released, it will be a free download through the Solutions Accelerators TechNet site.
  • NAP has a new face

    No, not a picture of my head, as cool as that would be! :-> We finally have our own website (in addition to the TechNet content of course). It has a cool spinning graphic of some of our early NAP adopters from around the globe . Check it out and...
  • NAP 802.1X Configuration Walkthrough – Part 1

    I just got back from TechEd 2008 North America (Orlando) where I presented two “breakout” sessions on NAP . It went off with a bang and most people really loved the sessions / demos. I have blogged a couple times in the past that I would document exactly...
  • Debugging NAP Errors (part 1)

    I’ve heard from a lot of folks who set up NAP in a lab who would love to have more information on all the great data that Network Policy Server (NPS) writes into the audit log. If you haven’t checked out our auditing, go to Server Manager and click on the main node for our role (Network Policy and Access Services). You will see all related NAP server events at the top of the right hand pane. This will be part 1 in a series of “Debugging NAP” posts. I decided to kick it off by examining the messages / errors which come from our Windows Security Center NAP integration piece (included in XP SP3, Vista and Server 2008). It is called the Windows System Health Agent on the client (or WSHA) and the Windows System Health Validator on the server (or WSHV). ...
  • Day 2, NAP’ing TechEd

    My NAP overview session went very well yesterday. All the demos went off perfect, and I thought {most} of the audience got a lot out of it. If you attended the session and have feedback, I’d love to hear it. I have a repeat session this Friday , so I...
  • Video: Server 2008 {NAP} Launch

    I suddenly realized this morning I never posted anything about my trip in February down to Los Angeles CA to launch the biggest product of my 11 year career at Microsoft – Windows Server 2008 . Whoops. :-> I made a 3 part video of my experience...
  • Tool for migrating IAS configuration settings to NPS is now available!

    Configuration settings for the Internet Authentication Service (IAS) in Windows Server 2003 are stored in .MDB files. Configuration settings for Network Policy Server (NPS) in Windows Server 2008 are stored in .XML files. If you install Windows Server...
  • NAP 802.1X Configuration Walkthrough – Part 2

    NAP 802.1X Configuration Walkthrough – Part 2 This is a continuation from Part 1 . Step 2 – Windows Server 2008 NPS, the heart of NAP I am going to take a slightly different approach than the 802.1X step-by-step guide . Feel free to follow...