http://blogs.technet.com/b/nap/archive/2008/06/11/day-2-nap-ing-teched.aspxMy NAP overview session went very well yesterday. All the demos went off perfect, and I thought {most} of the audience got a lot out of it. If you attended the session and have feedback, I’d love to hear it. I have a repeat session this Friday , so IenTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.technet.com/b/nap/archive/2008/06/11/day-2-nap-ing-teched.aspx#3072937Tue, 17 Jun 2008 21:21:03 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3072937Jeff Sigman MSFT<p>Magnus, thanks for attending (and liking) the session! Much appreciated!</p> <p>I assume you are asking about NAP + 802.1X? Provisioning computers is a challenge, even when using GPOs. You have to make sure that before they are provisioned, they can join the domain and such. When they are in the restricted VLAN, you should think about allowing access to a read-only or other AD DC (for domain scripts, mapped drives, GPO, etc).</p> <p>The way machine + user auth works is when the machine first boots, it auths as the computer entity. As soon as a user actually logs on physically, user auth is then performed until he logs off (when machine will kick back in).</p> <p>Hope this helps to clarify. Thanks again for attending the session!</p> <p>Jeff</p> <div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3072937" width="1" height="1">http://blogs.technet.com/b/nap/archive/2008/06/11/day-2-nap-ing-teched.aspx#3072142Mon, 16 Jun 2008 21:26:41 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3072142Magnus<p>Very good session. But I don&#180;t understand if computer GPOs will be applied if running NAP on computers ? What happened if have both computer and users authentication? </p><div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3072142" width="1" height="1">