| Server IP : 180.180.241.3 / Your IP : 216.73.216.252 Web Server : Microsoft-IIS/7.5 System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586 User : IUSR ( 0) PHP Version : 5.3.28 Disable Function : NONE MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /Windows/Help/Windows/en-US/ |
Upload File : |
MZ @ PE L ! @ 0 = @ .rsrc @ @.its @ @ 0 H X | |4 V S _ V E R S I O N _ I N F O S t r i n g F i l e I n f o 0 4 0 9 0 4 b 0 b ! F i l e V e r s i o n 1 . 0 0 . 0 0 l " F i l e D e s c r i p t i o n C o m p i l e d M i c r o s o f t H e l p 2 . 0 T i t l e B F i l e S t a m p B 5 E E 0 C 8 8 0 1 C A 0 4 1 F 4 J C o m p i l e r V e r s i o n 2 . 5 . 7 1 2 1 0 . 0 8 5 7 9 V C o m p i l e D a t e 2 0 0 9 - 0 7 - 1 4 T 0 1 : 0 9 : 1 7 > T o p i c C o u n t 8 8 0 0 0 0 0 0 0 0 0 0 0 0 A L e g a l C o p y r i g h t 2 0 0 5 M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . C C C C C C C C C C C C C D V a r F i l e I n f o $ T r a n s l a t i o n ti X 5
ITOLITLS ( X쌡^
V` x V CAOL P HH C ITSF # &n c -Y쌡^
VY쌡^
VIFCM AOLL V IFCM AOLL / /$FXFtiAttribute/ /$FXFtiAttribute/BTREE/$FXFtiAttribute/DATA /$FXFtiAttribute/PROPERTY2N /$FXFtiMain/ /$FXFtiMain/BTREE#/$FXFtiMain/DATA;/$FXFtiMain/PROPERTYLN/$Index/$ATTRNAMEp/$Index/$PROPBAGD/$Index/$STRINGS0&/$Index/$SYSTEM>
/$Index/$TOC/ /$Index/$TOC/$nap /$Index/$TOPICATTR /$Index/$TOPICSv/$Index/$URLSTRV`/$Index/$URLTBL6@/$Index/$VTAIDX (/$Index/AssetId/ /$Index/AssetId/$BL0( /$Index/AssetId/$LEAF_COUNTS(/$Index/AssetId/$LEAVES0 /$OBJINST /assets/ 0/assets/0031a461-1827-4ac7-bfa4-f3350766811d.xml t70/assets/06a1320e-fce7-4132-83ab-84557ccc111e.xml +L0/assets/0d11bde9-b56a-418b-8681-18f60c2fa56c.xml wS0/assets/10ff66bc-4217-45fc-b382-b6ddd09cc149.xml J]0/assets/12410d32-1ef1-476a-a4db-3b4ad8824cc9.xml ' 0/assets/14d4df85-548d-4118-b0fb-7c7b7e881e4e.xml F0/assets/2460f157-0771-4c9e-a23b-78a488825506.xml ag0/assets/3430da0c-ac6b-4be5-a8b7-711cd7b5b9ee.xml Hw0/assets/349393fd-5213-4acd-af32-1b84a898f8b6.xml ?F0/assets/396c8b17-fdc0-43dc-8419-31311f8ac665.xml -0/assets/3ac6ef9e-88c6-4656-b6bd-75aab87c4f41.xml 2n0/assets/41703db7-1497-48a7-aa77-0bf2796675b2.xml V0/assets/43d81e16-de9f-472e-af03-1cf242f70351.xml v"0/assets/47d149f8-2e1a-48c7-b421-3033b90f8c43.xml 0/assets/499cfc22-34ea-4f71-9c44-d7ffbb838e00.xml 60/assets/4b4ce8ad-5100-4418-bb6a-0f0f834b90b8.xml O0/assets/50ee545d-ea62-4fce-867a-a2afe2a826cf.xml R\0/assets/55b4bdb3-0ca3-4e9a-b4e3-36a901a8e466.xml .*0/assets/5cb8e189-8317-46e0-bb9e-46fed8fc5311.xml Xc0/assets/5df05e73-26a1-458a-802c-3a0573359b5e.xml ; 0/assets/613c9b94-d747-49a6-a748-a9aa189b5c4f.xml X0/assets/6dbc1518-e442-4f0d-b873-f44a17fa2c0f.xml n=0/assets/6fec9d41-3361-4ce6-9694-742805e82136.xml +*0/assets/7ed13aea-4580-4ecd-93ef-9b09b504b87a.xml U 0/assets/8b4a25dd-4799-4f90-861e-5babc3f23315.xml U0/assets/8d4418c1-341a-415d-84cb-d05e965b267b.xml hW0/assets/a6f7a23f-4562-482c-9518-865b6f2c375e.xml ?u0/assets/aa0eb9ca-83e3-4bd2-bdca-a24f255a208f.xml 4 0/assets/b90925c6-42dc-41ed-8a3d-dda542ba62b3.xml T^0/assets/baa45923-c5e1-4c3d-8c63-5ac0314c426b.xml 2w0/assets/c6ff457f-d39e-40aa-bb33-2a98cc6bb922.xml )0/assets/c964ab84-abc8-46d6-bc00-88729d2352fd.xml 7y0/assets/cd393e57-8754-4725-be42-81830e83ece3.xml 0Q0/assets/d36703f0-2f47-4de5-a9a3-52fe013f01e2.xml
0/assets/d6a94a33-03cd-4306-a324-3ff9a996ff9a.xml 90/assets/d786ddc3-9d9b-43c4-9194-761d0aba18ed.xml G 0/assets/d95cfa9c-cc16-495a-b3a4-38258ca7f3a0.xml g\0/assets/dca429b7-8f8e-4658-befa-f2a212ff0f9d.xml C0/assets/e5d79e75-b909-44d7-ac46-49bc9dca7f52.xml B0/assets/e6d4a126-73ed-43fe-978f-a09dd0033fda.xml ZD0/assets/edecb289-f2b7-435b-8689-72a7adf77d95.xml 10/assets/f8eb3df9-d112-45d8-89eb-669acb2bed52.xml O]0/assets/fde67fdd-6549-4dad-b5f3-120edb1d80e2.xml ,R0/assets/ff3dab67-7903-498b-bd22-88a09c732b45.xml ~'/nap.h1c %a/nap.H1F ./nap.H1T y=/nap.H1V 4E/nap_AssetId.H1K 6k/nap_BestBet.H1K !k/nap_LinkTerm.H1K l/nap_SubjectTerm.H1K xo::DataSpace/NameList <(::DataSpace/Storage/MSCompressed/Content gL,::DataSpace/Storage/MSCompressed/ControlData T )::DataSpace/Storage/MSCompressed/SpanInfo L/::DataSpace/Storage/MSCompressed/Transform/List <_::DataSpace/Storage/MSCompressed/Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/InstanceData/ i::DataSpace/Storage/MSCompressed/Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/InstanceData/ResetTable 3X3::Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/
lYF3!>N p V U n c o m p r e s s e d M S C o m p r e s s e d FX쌡^
Vƶ LZXC HH <maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Specify a Hash Algorithm</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Specifying a hash algorithm</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=0031a461-1827-4ac7-bfa4-f3350766811d#hash_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=0031a461-1827-4ac7-bfa4-f3350766811d#hash_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="hash_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To specify a hash algorithm by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open <maml:ui>Health Registration Settings</maml:ui>, and click <maml:ui>Request Policy</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>Hash Algorithm</maml:ui>, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>Hash Algorithm Properties</maml:ui> dialog box, click <maml:ui>Specific</maml:ui>, and then click the hash algorithm you want to use.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you configure request policy settings on your client computers, you must configure identical request policy settings on your Health Registration Authority (HRA) servers. If your HRA servers are not configured to use exactly the same asymmetric key algorithm, hash algorithm, and cryptographic service provider as your client computers, then your HRA servers will not be able to communicate with your client computers. Your client computers might be determined to be noncompliant and their network connectivity might be limited.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="hash_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To specify a hash algorithm by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following to obtain a list of the hash algorithms that are supported on the client computer: <maml:userInput>netsh nap client show hashes</maml:userInput></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client set hash oid = <oid></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>The following table provides a guideline for the placeholder text in the Netsh command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Placeholder</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Possible Values</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><oid></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The object identifier (OID) of any supported hash algorithm.</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The object identifier of the hash algorithm you want to use to encrypt communication between a client computer and an HRA server. The default is 1.3.14.3.2.29 (sha1RSA).</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you configure request policy settings on your client computers, you must configure identical request policy settings on your HRA servers. If your HRA servers are not configured to use exactly the same asymmetric key algorithm, hash algorithm, and cryptographic service provider as your client computers, then your HRA servers will not be able to communicate with your client computers. Your client computers might be determined to be noncompliant and their network connectivity might be limited.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure NAP Client Request Policy</maml:linkText><maml:uri href="mshelp://windows/?id=4b4ce8ad-5100-4418-bb6a-0f0f834b90b8"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure Health Registration Settings</maml:linkText><maml:uri href="mshelp://windows/?id=e5d79e75-b909-44d7-ac46-49bc9dca7f52"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>RADIUS Clients and Servers</maml:title><maml:introduction>
<maml:para>RADIUS clients are network access servers or devices. If you specify a RADIUS client in Network Policy Server (NPS), then the corresponding RADIUS server configuration is required on the RADIUS client device. For example, remote Health Registration Authority (HRA) servers are configured as RADIUS clients on NPS.</maml:para>
<maml:para>If the Network Access Protection (NAP) enforcement server is located on the same server as the NAP health policy server, then you do not need to configure RADIUS clients.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Infrastructure</maml:linkText><maml:uri href="mshelp://windows/?id=5df05e73-26a1-458a-802c-3a0573359b5e"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Health Policy Servers</maml:linkText><maml:uri href="mshelp://windows/?id=12410d32-1ef1-476a-a4db-3b4ad8824cc9"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Network Policies</maml:title><maml:introduction>
<maml:para>Network policies use conditions, settings, and constraints to authorize a level of access for clients attempting to connect to a network. For Network Access Protection (NAP), you must configure at least one network policy that will be applied to computers that are compliant with the health requirements and at least one network policy that will be applied to computers that are noncompliant. You can also configure a network policy that will be applied to computers that are non-NAP-capable. You might configure additional network polices to specify unique health requirements for different computers or segments of the network.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Health Policy Servers</maml:linkText><maml:uri href="mshelp://windows/?id=12410d32-1ef1-476a-a4db-3b4ad8824cc9"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Enable and Disable the IPsec Enforcement Client</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Enabling and disabling the IPsec enforcement client</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=10ff66bc-4217-45fc-b382-b6ddd09cc149#IPsec_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=10ff66bc-4217-45fc-b382-b6ddd09cc149#IPsec_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="IPsec_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable and disable the IPsec enforcement client by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Enforcement Clients</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>IPsec Relying Party</maml:ui>, and then click <maml:ui>Enable</maml:ui> or <maml:ui>Disable</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You must have Internet Protocol security (IPsec) policies and domain isolation deployed in your organization to enforce network access restriction with the IPsec enforcement client.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="IPsec_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable and disable the IPsec enforcement client by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To enable or disable the IPsec enforcement client, do one of the following:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>To enable the IPsec enforcement client, type: <maml:userInput>netsh nap client set enforcement ID = 79619 ADMIN = "ENABLE"</maml:userInput></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To disable the IPsec enforcement client, type: <maml:userInput>netsh nap client set enforcement ID = 79619 ADMIN = "DISABLE"</maml:userInput></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You must have IPsec policies and domain isolation deployed in your organization to enforce network access restriction with the IPsec enforcement client.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure NAP Enforcement Clients</maml:linkText><maml:uri href="mshelp://windows/?id=14d4df85-548d-4118-b0fb-7c7b7e881e4e"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>NAP Health Policy Servers</maml:title><maml:introduction>
<maml:para>A Network Access Protection (NAP) health policy server is a computer running Windows Server 2008 or Windows Server 2008 R2 with the Network Policy Server (NPS) role service installed and configured to evaluate the health of NAP client computers. All NAP enforcement technologies require at least one health policy server. A NAP health policy server uses policies and settings to evaluate network access requests that are submitted by NAP client computers. These policies and settings are defined in the following sections:</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Connection Request Policies</maml:linkText><maml:uri href="mshelp://windows/?id=ff3dab67-7903-498b-bd22-88a09c732b45"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Network Policies</maml:linkText><maml:uri href="mshelp://windows/?id=0d11bde9-b56a-418b-8681-18f60c2fa56c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Health Policies</maml:linkText><maml:uri href="mshelp://windows/?id=e6d4a126-73ed-43fe-978f-a09dd0033fda"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>System Health Validators</maml:linkText><maml:uri href="mshelp://windows/?id=f8eb3df9-d112-45d8-89eb-669acb2bed52"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>RADIUS Clients and Servers</maml:linkText><maml:uri href="mshelp://windows/?id=06a1320e-fce7-4132-83ab-84557ccc111e"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Remediation Server Groups</maml:linkText><maml:uri href="mshelp://windows/?id=349393fd-5213-4acd-af32-1b84a898f8b6"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
</maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configure NAP Enforcement Clients</maml:title><maml:introduction>
<maml:para>You can use the Network Access Protection (NAP) Client Configuration console, NAP client configuration settings in Group Policy, or Netsh commands for NAP client configuration to enable and disable NAP enforcement clients. A NAP enforcement client is responsible for requesting access to a network, communicating a client computer's health status to the NAP server that is authorizing the network access, and communicating the connection status of the client computer to other components of the NAP client architecture.</maml:para>
<maml:para>There are six available enforcement clients corresponding to the following network access mechanisms:</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Enforcement client</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Dynamic Host Configuration Protocol (DHCP)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Enforces health policies when a client computer attempts to obtain an IP address from a NAP-enabled DHCP server.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Internet Protocol security (IPsec)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Enforces health policies when a client computer attempts to communicate with another computer using IPsec.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Remote Desktop Gateway (RD Gateway)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Enforces health policies on a computer attempting to access a remote desktop gateway.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Extensible Authentication Protocol (EAP)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Enforces health policies when a client computer attempts to access a network through an EAP-authenticated network connection, such as 802.1X wired and wireless connections. If the client computer is running Windows® 7, the EAP enforcement client is also used for virtual private network (VPN) connections.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Remote access</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Enforces health policies when a client computer running Windows Vista® or Windows XP with Service Pack 3 (SP3) attempts to gain access to the network through a NAP-enabled VPN server.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Wireless EAP over LAN (EAPOL)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Enforces health policies when a client computer running Windows XP SP3 attempts to access a network through an 802.1X-authenticated wireless connection network connection.</maml:para>
</maml:entry></maml:row></maml:table>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>When to perform this task</maml:title><maml:introduction>
<maml:para>To deploy NAP in your organization, you must enable at least one NAP enforcement client on client computers. You might also need to enable additional enforcement clients as your network health requirements change and you want to enforce health policies through other network access mechanisms.</maml:para>
<maml:para>You might need to disable enforcement clients when you are troubleshooting network access problems or when your health requirements change and you want to enforce health policies by using other enforcement clients.</maml:para>
<maml:para>To complete this task, perform the following procedures:</maml:para>
<maml:para><maml:navigationLink><maml:linkText>Enable and Disable the DHCP Enforcement Client</maml:linkText><maml:uri href="mshelp://windows/?id=d36703f0-2f47-4de5-a9a3-52fe013f01e2"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Enable and Disable the IPsec Enforcement Client</maml:linkText><maml:uri href="mshelp://windows/?id=10ff66bc-4217-45fc-b382-b6ddd09cc149"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Enable and Disable the RD Gateway Enforcement Client</maml:linkText><maml:uri href="mshelp://windows/?id=fde67fdd-6549-4dad-b5f3-120edb1d80e2"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Enable and Disable the EAP Enforcement Client</maml:linkText><maml:uri href="mshelp://windows/?id=613c9b94-d747-49a6-a748-a9aa189b5c4f"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Enable and Disable the Remote Access Enforcement Client</maml:linkText><maml:uri href="mshelp://windows/?id=2460f157-0771-4c9e-a23b-78a488825506"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Enable and Disable the Wireless EAPOL Enforcement Client</maml:linkText><maml:uri href="mshelp://windows/?id=cd393e57-8754-4725-be42-81830e83ece3"></maml:uri></maml:navigationLink></maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Client Configuration Overview</maml:linkText><maml:uri href="mshelp://windows/?id=55b4bdb3-0ca3-4e9a-b4e3-36a901a8e466"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Client Configuration Checklist</maml:linkText><maml:uri href="mshelp://windows/?id=c6ff457f-d39e-40aa-bb33-2a98cc6bb922"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Enable and Disable the Remote Access Enforcement Client</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Enabling and disabling the remote access enforcement client</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=2460f157-0771-4c9e-a23b-78a488825506#remote_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=2460f157-0771-4c9e-a23b-78a488825506#remote_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="remote_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable and disable the remote access enforcement client by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Enforcement Clients</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>Remote Access Quarantine Enforcement Client</maml:ui>, and then click <maml:ui>Enable</maml:ui> or <maml:ui>Disable</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="remote_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable or disable the remote access enforcement client by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To enable or disable the remote access enforcement client, do one of the following:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>To enable the remote access enforcement client, type: <maml:userInput>netsh nap client set enforcement ID = 79618 ADMIN = "ENABLE"</maml:userInput></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To disable the remote access enforcement client, type: <maml:userInput>netsh nap client set enforcement ID = 79618 ADMIN = "DISABLE"</maml:userInput></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure NAP Enforcement Clients</maml:linkText><maml:uri href="mshelp://windows/?id=14d4df85-548d-4118-b0fb-7c7b7e881e4e"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add an HRA Server to a Trusted Server Group</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Adding an HRA server to a trusted server group</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=3430da0c-ac6b-4be5-a8b7-711cd7b5b9ee#add_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=3430da0c-ac6b-4be5-a8b7-711cd7b5b9ee#add_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="add_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add an HRA server to a trusted server group by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Double-click <maml:ui>Health Registration Settings</maml:ui>, and then click <maml:ui>Trusted Server Groups</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the middle pane, double-click the name of your trusted server group.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>Trusted Server Group Properties</maml:ui> dialog box, type the URL of a trusted server that you want to add, click <maml:ui>Add</maml:ui>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="add_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add an HRA server to a trusted server group by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client add server group = <group> url = <url> processingorder = <processingorder></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>The following table provides a guideline for the placeholder text in the Netsh command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Placeholder</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Possible Values</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><group></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any text string. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The name of the trusted server group that you are modifying.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><url></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any valid URL, UNC path, or IP address. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The HRA server that you want to add to the trusted server group.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><processingorder></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any integer. Cannot be zero (0). (Optional)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The processing priority to assign to this HRA server.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure Trusted Server Groups for NAP Clients</maml:linkText><maml:uri href="mshelp://windows/?id=6fec9d41-3361-4ce6-9694-742805e82136"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Remediation Server Groups</maml:title><maml:introduction>
<maml:para>Remediation server groups are used to specify servers that are available to noncompliant Network Access Protection (NAP) clients for the purpose of remediating their health state to comply with health requirements. The type of remediation servers that are required depend on your health requirements and network access methods.</maml:para>
<maml:para>Remediation servers do not only provide updates to noncompliant computers. They can also provide network services that noncompliant computers require in order to update their health, or to perform a limited set of tasks while they are in a restricted status. For example, a remediation server might provide DHCP services to computers that have been placed on a noncompliant VLAN. Remediation servers might also host Web sites that provide instructions users can follow to make their computers compliant.</maml:para>
<maml:para>Remediation servers can be accessible to both compliant and noncompliant computers or to noncompliant computers only. The methods for providing access to remediation servers depend on the NAP enforcement method.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>IPsec enforcement
</maml:title><maml:introduction>
<maml:para>In an Internet Protocol security (IPsec) enforcement design, remediation servers should be placed in the IPsec logical boundary network. You must issue NAP exemption certificates to remediation servers and configure IPsec policy so that they can freely communicate with noncompliant computers. Placing remediation servers in a remediation servers group in the NPS console has no effect on access to these servers when you use NAP with IPsec enforcement.</maml:para></maml:introduction>
</maml:section><maml:section><maml:title>802.1X enforcement</maml:title><maml:introduction>
<maml:para>In an 802.1X enforcement design, the placement of remediation servers depends on whether virtual LANS (VLANs) or access control lists (ACLs) are used to restrict the network access of noncompliant clients. NAP enforcement points might support both or only one of these methods.</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>802.1X enforcement with VLANs</maml:phrase>. Remediation servers must be placed on the noncompliant VLAN or access must be provided through inter-VLAN routing methods. If remediation servers must also be accessible to compliant NAP client computers, the remediation server is placed on a trunking port or dual-homed to provide access to multiple VLANs.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>802.1X enforcement with ACLs</maml:phrase>. Access of noncompliant computers is restricted to the IP addresses and service port numbers of remediation servers only.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Placing remediation servers in a remediation servers group in the NPS console has no effect on access to these servers when you use NAP with 802.1X enforcement.</maml:para></maml:introduction></maml:section><maml:section><maml:title>VPN enforcement</maml:title><maml:introduction>
<maml:para>In a VPN enforcement design, two methods are available for providing access to remediation servers: remediation server groups and IP filters. Both of these methods can be used to provide noncompliant NAP clients with access to remediation servers. When you configure a remediation server group, noncompliant NAP client computers are automatically granted access to the IP address of each server in the list. IP filters have the added advantage of allowing you to specify that access is granted only to a specified service port number.</maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>If no remediation server groups or IP filters are configured in noncompliant network policy for VPN enforcement, full network access is granted to noncompliant NAP client computers.</maml:para>
</maml:alertSet></maml:introduction></maml:section><maml:section><maml:title>DHCP enforcement</maml:title><maml:introduction>
<maml:para>In a DHCP enforcement design, noncompliant NAP client computers are provided with classless static host routes to each member device that is configured in a remediation servers group using the NPS console. If remediation servers are located on a subnet different from the subnet on which NAP clients appear, the DHCP server uses the 003 Router option from the default NAP class to provide noncompliant computers with static host routes to remediation servers. The routing device configured in this scope option must be capable of forwarding requests from noncompliant NAP clients to the remediation server. You can also configure classless static host routes to remediation servers by using scope option 121 in the default NAP class.</maml:para></maml:introduction></maml:section><maml:section><maml:title>RD Gateway enforcement</maml:title><maml:introduction>
<maml:para>NAP with Remote Desktop Gateway (RD Gateway) enforcement does not support the use of remediation server groups. If remediation servers are required, they must be made available to client computers before connecting to the RD Gateway enforcement server.</maml:para></maml:introduction></maml:section><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Health Policy Servers</maml:linkText><maml:uri href="mshelp://windows/?id=12410d32-1ef1-476a-a4db-3b4ad8824cc9"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>System Health Validator Settings</maml:title><maml:introduction>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
<maml:para>System health validator (SHV) settings allow you to configure the system health requirements for Network Access Protection (NAP) client computers. If an SHV is designed to work with a health requirement server, you might configure some or all SHV settings on this server. To configure SHV settings on Network Policy Server (NPS), click <maml:ui>Configure</maml:ui> in the SHV properties window to open the SHV configuration dialog box.</maml:para>
<maml:para>If an SHV supports the storing of multiple configurations, you can create additional SHV settings for use with your health policies.</maml:para>
</maml:introduction></maml:section><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>System Health Validator Error Codes</maml:linkText><maml:uri href="mshelp://windows/?id=499cfc22-34ea-4f71-9c44-d7ffbb838e00"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Specify Title Text for the NAP Client User Interface</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Specifying title text for the NAP client user interface</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=3ac6ef9e-88c6-4656-b6bd-75aab87c4f41#titletext_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=3ac6ef9e-88c6-4656-b6bd-75aab87c4f41#titletext_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="titletext_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To specify title text for the NAP client user interface by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>User Interface Settings</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>User Interface</maml:ui>, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>User Interface Properties</maml:ui> dialog box, in <maml:ui>Title</maml:ui>, type the title text that you want to appear in the NAP client user interface.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="titletext_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To specify title text for the NAP client user interface by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client set userinterface title = <title></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>The following table provides a guideline for the placeholder text in the Netsh command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Placeholder</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Possible Values</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><title></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any string.</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The title that you want to display in the NAP client user interface.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure the NAP Client User Interface</maml:linkText><maml:uri href="mshelp://windows/?id=50ee545d-ea62-4fce-867a-a2afe2a826cf"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Command-line syntax notation</maml:linkText><maml:uri href="mshelp://windows/?id=7ed13aea-4580-4ecd-93ef-9b09b504b87a"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Import NAP Client Configuration Settings</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Importing settings from a configuration file</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=41703db7-1497-48a7-aa77-0bf2796675b2#import_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=41703db7-1497-48a7-aa77-0bf2796675b2#import_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="import_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To import settings from a configuration file by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>NAP Client Management</maml:ui>, and then click <maml:ui>Import</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>Import NAP Configuration</maml:ui> dialog box, in <maml:ui>Look in</maml:ui>, click the location where the configuration file is stored.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>File name</maml:ui>, type the file name for the configuration file.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Open</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="import_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To import settings from a configuration file by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client import filename = <filename></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>The following table provides a guideline for the placeholder text in the Netsh command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Placeholder</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Possible Values</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><filename></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any string.</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The path and file name for the configuration file.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Export NAP Client Configuration Settings</maml:linkText><maml:uri href="mshelp://windows/?id=b90925c6-42dc-41ed-8a3d-dda542ba62b3"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Command-line syntax notation</maml:linkText><maml:uri href="mshelp://windows/?id=7ed13aea-4580-4ecd-93ef-9b09b504b87a"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Remove an HRA Server from a Trusted Server Group</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Removing an HRA server from a trusted server group</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=43d81e16-de9f-472e-af03-1cf242f70351#remove_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=43d81e16-de9f-472e-af03-1cf242f70351#remove_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="remove_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To remove an HRA server from a trusted server group by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Double-click <maml:ui>Health Registration Settings</maml:ui>, and then click <maml:ui>Trusted Server Groups</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the middle pane, double-click the name of your trusted server group.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>Trusted Server Group Properties</maml:ui> dialog box, click the URL of a trusted server that you want to remove, and then click <maml:ui>Remove</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="remove_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To remove an HRA server from a trusted server group by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client delete server group = <group> url = <url></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>The following table provides a guideline for the placeholder text in the Netsh command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Placeholder</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Possible Values</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><group></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any text string. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The name of the trusted server group that you are changing.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><url></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any text string. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The URL of the HRA server that you want to remove from the trusted server group.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure Trusted Server Groups for NAP Clients</maml:linkText><maml:uri href="mshelp://windows/?id=6fec9d41-3361-4ce6-9694-742805e82136"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Specify Description Text for the NAP Client User Interface</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Specifying description text for the NAP client user interface</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=47d149f8-2e1a-48c7-b421-3033b90f8c43#description_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=47d149f8-2e1a-48c7-b421-3033b90f8c43#description_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="description_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To specify the description text for the NAP client user interface by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>User Interface Settings</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>UI Settings</maml:ui>, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>UI Settings Properties</maml:ui> dialog box, in <maml:ui>Description</maml:ui>, type the description text that you want to appear in the NAP client user interface.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="description_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To specify the description text for the NAP client user interface by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client set userinterface text = <text></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>The following table provides a guideline for the placeholder text in the Netsh command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Placeholder</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Possible Values</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><text></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any string.</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The description that you want to display in the NAP client user interface.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure the NAP Client User Interface</maml:linkText><maml:uri href="mshelp://windows/?id=50ee545d-ea62-4fce-867a-a2afe2a826cf"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Command-line syntax notation</maml:linkText><maml:uri href="mshelp://windows/?id=7ed13aea-4580-4ecd-93ef-9b09b504b87a"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>System Health Validator Error Codes</maml:title><maml:introduction>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
<maml:para>System health validator (SHV) error codes can be returned for an SHV when the associated system health agent (SHA) on a Network Access Protection (NAP) client computer requests access to the network. If an error code is returned, you can choose whether to evaluate the NAP client computer as compliant or noncompliant with health requirements. By default, all error codes are set to noncompliant.</maml:para>
<maml:para>The following is a description of available error codes:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>SHV unable to contact required services</maml:phrase>. This error can occur if Network Policy Server (NPS) loses connectivity to a health requirement server, such as an antivirus signature server.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>SHA unable to contact required services</maml:phrase>. This error can occur if the SHA is unable to successfully read the client configuration.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>SHA not responding to NAP Client</maml:phrase>. This error can occur if an SHA is not properly initialized and registered.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>SHV not responding</maml:phrase>. This error can occur if the performance of an SHV is degraded (for example, if NPS is out of memory).</maml:para>
</maml:listItem><maml:listItem>
<maml:para><maml:phrase>Vendor specific error code received</maml:phrase>. This error can occur if NPS receives an error code that is unique to the SHA or SHV vendor. Some vendors might return this code when NPS is unable to contact a health requirement server.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>System Health Validator Settings</maml:linkText><maml:uri href="mshelp://windows/?id=396c8b17-fdc0-43dc-8419-31311f8ac665"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configure NAP Client Request Policy</maml:title><maml:introduction>
<maml:para>You can use the NAP Client Configuration console to specify the security mechanisms a client computer uses to communicate with Health Registration Authority (HRA) servers. These settings, known as request policy settings, determine which hash algorithm and cryptographic service provider (CSP) a client computer uses to encrypt communication with HRA servers. You can only specify one hash algorithm and CSP on a client computer. When specified, the client computer will use only that security mechanism to communicate with HRA servers.</maml:para>
<maml:para>You do not need to configure request policy settings on your client computers. By default, a NAP-capable client computer initiates a negotiation process with an HRA server using a mutually acceptable default security mechanism for encrypting communication. It is recommended that you use the default request policy settings.</maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>You should not modify request policy settings unless you have thoroughly tested your request policy settings in a secure test environment. Altering request policy settings can cause your client computers to lose network connectivity.</maml:para>
</maml:alertSet>
<maml:para>If you configure request policy settings on your client computers, you must configure identical request policy settings on your HRA servers. If your HRA servers are not configured to use exactly the same hash algorithm and CSP as your client computers, then your HRA servers will not be able to communicate with client computers and client computers might be deemed unhealthy, resulting in limited network connectivity.</maml:para>
<maml:para><maml:navigationLink><maml:linkText>Specify a Hash Algorithm</maml:linkText><maml:uri href="mshelp://windows/?id=0031a461-1827-4ac7-bfa4-f3350766811d"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Specify a Cryptographic Service Provider</maml:linkText><maml:uri href="mshelp://windows/?id=dca429b7-8f8e-4658-befa-f2a212ff0f9d"></maml:uri></maml:navigationLink></maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:para><maml:navigationLink><maml:linkText>Configure Health Registration Settings</maml:linkText><maml:uri href="mshelp://windows/?id=e5d79e75-b909-44d7-ac46-49bc9dca7f52"></maml:uri></maml:navigationLink></maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configure the NAP Client User Interface</maml:title><maml:introduction>
<maml:para>You can use the NAP Client Configuration console to configure the NAP Status user interface that appears on a client computer. The NAP Status user interface consists of one dialog box and provides information about the system health agents (SHAs) that are enabled on the computer, network enforcement status, and remediation status.</maml:para>
<maml:para>By default, the NAP dialog box contains no branding information. Adding branding information is optional.</maml:para>
<maml:para>You should customize the user interface when:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>You want users to have a clear understanding that their network access is being controlled by your organization.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You want to provide your users with contact information for your IT department so that they can get assistance when a computer has limited network access.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>You can customize the following optional user interface elements:</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Element</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Title</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Appears as a banner at the top of the <maml:ui>NAP Status</maml:ui> dialog box and is usually the name of your organization or the name of your organization's IT department.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Appears under the title and is usually the slogan for your organization or your organization's IT department. The description can also contain contact information for your organization's Help desk or IT department.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Image</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Appears next to the title and is usually the logo for your organization or IT department. The image you specify must be one of the following file types: .jpg, .bmp, .png, or .gif. The maximum file size allowed is 1.0 megabyte (MB) and the image dimensions must be 64 × 64 pixels or smaller in size. Large images are not resized.</maml:para>
</maml:entry></maml:row>
</maml:table><maml:alertSet class="important"><maml:title>Important </maml:title><maml:para>If your server has a Language Interface Pack (LIP) installed, you must also install this LIP on NAP client computers. NAP client computers that do not have the same LIP installed will not display custom title and description text.</maml:para></maml:alertSet>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Specify Title Text for the NAP Client User Interface</maml:linkText><maml:uri href="mshelp://windows/?id=3ac6ef9e-88c6-4656-b6bd-75aab87c4f41"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Specify Description Text for the NAP Client User Interface</maml:linkText><maml:uri href="mshelp://windows/?id=47d149f8-2e1a-48c7-b421-3033b90f8c43"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Specify an Image for the NAP Client User Interface</maml:linkText><maml:uri href="mshelp://windows/?id=c964ab84-abc8-46d6-bc00-88729d2352fd"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Client Configuration Overview</maml:linkText><maml:uri href="mshelp://windows/?id=55b4bdb3-0ca3-4e9a-b4e3-36a901a8e466"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Client Configuration Checklist</maml:linkText><maml:uri href="mshelp://windows/?id=c6ff457f-d39e-40aa-bb33-2a98cc6bb922"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>NAP Client Configuration Overview</maml:title><maml:introduction>
<maml:para>Before you can use Network Access Protection (NAP) to enforce health policies on client computers, you need to configure NAP settings on your client computers. The NAP Client Configuration console and NAP client configuration settings in the Group Policy Management Console provide a graphical user interface for configuring NAP client settings.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Why do I need to manage NAP settings on client computers?</maml:title><maml:introduction>
<maml:para>NAP relies on both server and client components. To make the server components and client components work together, you must configure NAP settings on both the servers and the client computers.</maml:para>
<maml:para>The server components are responsible for validating the health of client computers and specifying which network resources are available to client computers.</maml:para>
<maml:para>The client components are responsible for compiling health status statements on client computers, maintaining a client computer's health state, and communicating a client computer's health state to the server components.</maml:para>
<maml:para>The NAP Client Configuration console helps you configure NAP user interface settings, NAP enforcement client settings, and Health Registration Authority (HRA) settings on your client computers. A NAP enforcement client is responsible for enforcing network access restrictions.</maml:para>
<maml:para>For most NAP scenarios, you need to configure NAP enforcement client settings only. Configuration of interface settings is optional, and you do not need to configure NAP health registration authority settings unless you deploy Internet Protocol security (IPsec)-based enforcement. By default, the built-in NAP enforcement clients are disabled. To enforce health policies on a client computer, you must enable at least one NAP enforcement client.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>What can I do with NAP Client Configuration?</maml:title><maml:introduction>
<maml:para>You can use the NAP Client Configuration console to perform the following tasks on your client computers:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Enable and disable NAP enforcement clients, including the built-in NAP enforcement clients that are provided with the NAP platform and any non-Microsoft NAP enforcement clients.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Configure branding text and graphics for the NAP user interface that appears on client computers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Specify with which HRA servers you want client computers to communicate.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Specify the cryptographic mechanism that you want client computers to use when communicating with HRA servers.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>In addition, you can use NAP Client Configuration to enable and disable NAP tracing, specify the level of detail you want to capture in a tracing log file, and import and export NAP client settings using an .xml-based configuration file.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>When should I use NAP Client Configuration?</maml:title><maml:introduction>
<maml:para>NAP Client Configuration is one of three tools you can use to configure NAP settings on your client computers. In addition to NAP Client Configuration, you can configure NAP settings on local client computers by using the Netsh commands for NAP client, or you can use the Group Policy Management Console (GPMC) to configure the NAP Client Configuration Group Policy settings. When you configure NAP client settings in Group Policy, these settings are automatically configured on NAP-capable domain member client computers when Group Policy is refreshed.</maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title><maml:para>If you configure NAP client settings in Group Policy, any settings that are configured using the Netsh command-line tool for NAP client or the NAP Client Configuration Console will be ignored.</maml:para></maml:alertSet>
<maml:para>You should use NAP Client Configuration on a local computer when any of the following are true:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>You want to use a graphical user interface to configure NAP settings on a local computer instead of using the Netsh commands for NAP client.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Your organization uses Group Policy to manage domain member client computers and you want to create an .xml configuration file that you can use to configure the NAP Group Policy settings.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You have a small number of computers that require custom configuration settings and you want to configure each computer individually.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You want to configure all of your client computers in exactly the same way, but you cannot automate or manage the configuration process by using scripts or Group Policy.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>You should use NAP Client Configuration through Group Policy when your organization uses Group Policy to manage client computers and you want NAP Group Policy settings applied to client computers when Group Policy settings are applied.</maml:para>
<maml:para>NAP Client Configuration can be used to configure NAP-capable computers only. A computer is NAP-capable if it has the NAP components installed and it can verify its health by creating a statement of health (SoH). Computers running Windows® 7, Windows Vista®, Windows XP Service Pack 3 (SP3), Windows Server® 2008, and Windows Server® 2008 R2 are NAP-capable. You cannot use NAP Client Configuration to manage computers that are not NAP-capable.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>You cannot use NAP Client Configuration to configure NAP settings on a remote computer. NAP Client Configuration can be used only to configure NAP settings on a local computer or to create an .xml configuration file on a local computer.</maml:para>
</maml:alertSet>
</maml:introduction></maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Use NAP Client Configuration Files</maml:linkText><maml:uri href="mshelp://windows/?id=5cb8e189-8317-46e0-bb9e-46fed8fc5311"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure NAP Enforcement Clients</maml:linkText><maml:uri href="mshelp://windows/?id=14d4df85-548d-4118-b0fb-7c7b7e881e4e"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure the NAP Client User Interface</maml:linkText><maml:uri href="mshelp://windows/?id=50ee545d-ea62-4fce-867a-a2afe2a826cf"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure Health Registration Settings</maml:linkText><maml:uri href="mshelp://windows/?id=e5d79e75-b909-44d7-ac46-49bc9dca7f52"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure NAP Tracing</maml:linkText><maml:uri href="mshelp://windows/?id=6dbc1518-e442-4f0d-b873-f44a17fa2c0f"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Use NAP Client Configuration Files</maml:title><maml:introduction>
<maml:para>You can use the NAP Client Configuration console to import NAP client settings from an *.xml format configuration file or to export NAP client settings to an *.xml format configuration file. This allows you to create a configuration file on one computer and then import the configuration to multiple computers, reducing the administrative overhead of manually configuring every computer.</maml:para>
<maml:para>You can also use a configuration file to configure Network Access Protection (NAP) Group Policy settings by importing an existing configuration file into the NAP Client Configuration Group Policy extension. The NAP Client Configuration Group Policy extension is located within the Group Policy Management Console. If you configure NAP client settings in Group Policy, these settings are applied to all NAP-capable domain member computers when Group Policy is applied.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>When to perform this task</maml:title><maml:introduction>
<maml:para>You should export your settings to a configuration file when:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>You want to apply the same NAP settings to multiple computers using the NAP Client Configuration console.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You want to configure NAP Group Policy settings by importing the configuration file into the Group Policy Management Console.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>To complete this task, perform the following procedures:</maml:para>
<maml:para><maml:navigationLink><maml:linkText>Export NAP Client Configuration Settings</maml:linkText><maml:uri href="mshelp://windows/?id=b90925c6-42dc-41ed-8a3d-dda542ba62b3"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Import NAP Client Configuration Settings</maml:linkText><maml:uri href="mshelp://windows/?id=41703db7-1497-48a7-aa77-0bf2796675b2"></maml:uri></maml:navigationLink></maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Client Configuration Overview</maml:linkText><maml:uri href="mshelp://windows/?id=55b4bdb3-0ca3-4e9a-b4e3-36a901a8e466"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Client Configuration Checklist</maml:linkText><maml:uri href="mshelp://windows/?id=c6ff457f-d39e-40aa-bb33-2a98cc6bb922"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>NAP Infrastructure</maml:title><maml:introduction>
<maml:para>A Network Access Protection (NAP) infrastructure includes NAP client computers, NAP enforcement points, and NAP health policy servers. Optional components include remediation servers and health requirement servers.
</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>NAP client computers</maml:title><maml:introduction>
<maml:para>To access the network, a NAP client first collects information about its health from locally installed software called system health agents (SHAs). Each SHA installed on the client computer provides information about current settings or activity that it is designed to monitor. Information from SHAs is collected by the NAP Agent, which is a service running on the local computer. The NAP Agent service summarizes the health state of the computer and passes this information to one or more NAP enforcement clients. An enforcement client is software that interacts with NAP enforcement points to access or communicate on the network.</maml:para>
</maml:introduction>
</maml:section><maml:section>
<maml:title>NAP enforcement points</maml:title><maml:introduction>
<maml:para>A NAP enforcement point is a server or hardware device that provides a level of network access to the NAP client computer. Each NAP enforcement technology uses a different type of NAP enforcement point. See the following table. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry><maml:para>NAP enforcement method</maml:para></maml:entry>
<maml:entry><maml:para>NAP enforcement point</maml:para></maml:entry>
</maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry><maml:para>Internet Protocol security (IPsec)</maml:para></maml:entry>
<maml:entry><maml:para>Health Registration Authority (HRA) and Network Policy Server (NPS)</maml:para></maml:entry>
</maml:row>
<maml:row>
<maml:entry><maml:para>802.1X</maml:para></maml:entry>
<maml:entry><maml:para>Switch (wired) or wireless access point (wireless)</maml:para></maml:entry>
</maml:row><maml:row>
<maml:entry><maml:para>VPN</maml:para></maml:entry>
<maml:entry><maml:para>RRAS</maml:para></maml:entry>
</maml:row><maml:row>
<maml:entry><maml:para>DHCP</maml:para></maml:entry>
<maml:entry><maml:para>DHCP and NPS</maml:para></maml:entry>
</maml:row>
<maml:row>
<maml:entry><maml:para>Remote Desktop Gateway (RD Gateway)</maml:para></maml:entry>
<maml:entry><maml:para>RD Gateway and NPS</maml:para></maml:entry>
</maml:row>
</maml:table>
<maml:para>When a NAP enforcement point is running Windows Server 2008 or Windows Server 2008 R2, it is referred to as a NAP enforcement server. All NAP enforcement servers must be running Windows Server 2008 or Windows Server 2008 R2. In NAP with 802.1X enforcement, the NAP enforcement point is an IEEE 802.1X-compliant switch or wireless access point. NAP enforcement servers for the IPsec, DHCP, and RD Gateway enforcement methods must also be running NPS configured either as a RADIUS proxy or as a NAP health policy server. NAP with VPN enforcement does not require that NPS is installed on the VPN server.</maml:para>
</maml:introduction>
</maml:section><maml:section>
<maml:title>NAP health policy servers</maml:title><maml:introduction>
<maml:para>A NAP health policy server is a computer running Windows Server 2008 or Windows Server 2008 R2 with the NPS role service installed and configured to evaluate the health of NAP client computers. All NAP enforcement technologies require at least one health policy server. A NAP health policy server uses policies and settings to evaluate network access requests that are submitted by NAP client computers.</maml:para>
</maml:introduction>
</maml:section><maml:section>
<maml:title>NAP remediation servers</maml:title><maml:introduction>
<maml:para>NAP remediation servers provide updates and services to noncompliant client computers. Depending on the design of your remediation network, a remediation server might also be accessible by compliant computers. Some examples of NAP remediation servers include:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>Antivirus signature servers</maml:phrase>. If health policies require that computers must have a recent antivirus signature, noncompliant computers must have access to a server to provide these updates.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Windows Server Update Services</maml:phrase>. If health policies require that computers have recent security updates or other software updates, you might provide these by placing WSUS on your remediation network.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>System Center component servers</maml:phrase>. System Center Configuration Manager management points, software update points, and distribution points host the software updates required to bring computers into compliance. When you deploy NAP with Configuration Manager, NAP-capable computers require access to computers running these site system roles in order to download their client policy, scan for software update compliance, and download required software updates.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Domain controllers</maml:phrase>. Noncompliant computers might require access to domain services on the noncompliant network for authentication purposes, to download policies from Group Policy, or to maintain domain profile settings.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>DNS servers</maml:phrase>. Noncompliant computers must have access to DNS in order to resolve host names.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>DHCP servers</maml:phrase>. Noncompliant computers must have access to a DHCP server if the client’s IP profile changes on the noncompliant network or if the DHCP lease expires.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Troubleshooting servers</maml:phrase>. When you configure a remediation server group, you have the option of providing a troubleshooting URL with instructions about how to bring computers into compliance with your health policies. You can provide a different URL for each network policy. These URLs must be accessible on the remediation network.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Other services</maml:phrase>. You might provide access to the Internet on your remediation network so that noncompliant computers can reach remediation services such as Windows Update and other Internet resources.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
</maml:section><maml:section>
<maml:title>NAP health requirement servers</maml:title><maml:introduction>
<maml:para>A health requirement server is a computer that provides health policy requirements and health evaluation information to one or more system health validators (SHVs). If the health status reported by NAP client computers can be validated by NPS without consulting another device, then a health requirement server is not required. For example, WSUS is not considered a health requirement server when used with Windows Security Health Validator (WSHV). Even though an administrator can use WSUS to specify which updates client computers must have, it is the client computer that reports whether it has installed these updates. In this scenario, WSUS is a remediation server, not a health requirement server.</maml:para>
<maml:para>A health requirement server is used if you deploy NAP with the Configuration Manager SHV. The Configuration Manager SHV contacts a global catalog server to validate the client’s health state by checking the health state reference that is published to Active Directory Domain Services (AD DS). Therefore, a domain controller is a health requirement server if you have deployed the Configuration Manager SHV. Other SHVs might also use health requirement servers.</maml:para>
</maml:introduction>
</maml:section><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Overview</maml:linkText><maml:uri href="mshelp://windows/?id=d95cfa9c-cc16-495a-b3a4-38258ca7f3a0"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Enable and Disable the EAP Enforcement Client</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Enabling and disabling the EAP enforcement client</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=613c9b94-d747-49a6-a748-a9aa189b5c4f#EAP_windows"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=613c9b94-d747-49a6-a748-a9aa189b5c4f#EAP_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="EAP_windows"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable and disable the EAP enforcement client by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Enforcement Clients</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>EAP Quarantine Enforcement Client</maml:ui>, and then click <maml:ui>Enable</maml:ui> or <maml:ui>Disable</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="EAP_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable and disable the EAP enforcement client by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To enable or disable the EAP enforcement client, do one of the following:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>To enable the EAP enforcement client, type: <maml:userInput>netsh nap client set enforcement ID = 79623 ADMIN = "ENABLE"</maml:userInput></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To disable the EAP enforcement client, type: <maml:userInput>netsh nap client set enforcement ID = 79623 ADMIN = "DISABLE"</maml:userInput></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure NAP Enforcement Clients</maml:linkText><maml:uri href="mshelp://windows/?id=14d4df85-548d-4118-b0fb-7c7b7e881e4e"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configure NAP Tracing</maml:title><maml:introduction>
<maml:para>You can use the NAP Client Configuration console to configure Network Access Protection (NAP) tracing. Tracing records NAP events in a log file and is useful for troubleshooting and maintenance. You can also use tracing logs to evaluate the health and security of your network. You can configure three levels of tracing: Basic, Advanced, and Debug.</maml:para>
<maml:para>By default, NAP tracing is disabled, which means that no NAP events are recorded in the NAP tracing log files.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>When to perform this task</maml:title><maml:introduction>
<maml:para>You should enable NAP tracing when:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>You are troubleshooting NAP problems.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You want to evaluate the overall health and security of the computers in your organization.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>To complete this task, perform the following procedures:</maml:para>
<maml:para><maml:navigationLink><maml:linkText>Enable and Disable NAP Tracing</maml:linkText><maml:uri href="mshelp://windows/?id=aa0eb9ca-83e3-4bd2-bdca-a24f255a208f"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Specify Level of Detail in the NAP Tracing Log</maml:linkText><maml:uri href="mshelp://windows/?id=a6f7a23f-4562-482c-9518-865b6f2c375e"></maml:uri></maml:navigationLink></maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Client Configuration</maml:linkText><maml:uri href="mshelp://windows/?id=d6a94a33-03cd-4306-a324-3ff9a996ff9a"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Client Configuration Checklist</maml:linkText><maml:uri href="mshelp://windows/?id=c6ff457f-d39e-40aa-bb33-2a98cc6bb922"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configure Trusted Server Groups for NAP Clients</maml:title><maml:introduction>
<maml:para>You can use the NAP Client Configuration console to specify the Health Registration Authority (HRA) servers that a client computer uses to obtain a health certificate. To do this, you must create a trusted server group, which is an ordered list of one or more HRA servers. If there is more than one HRA server listed in a trusted server group, a client computer attempts to contact each HRA server in the order specified until an available server is found.</maml:para>
<maml:para>You must configure a trusted server group only if you are using the Internet Protocol security (IPsec) enforcement client to enforce health policies. The IPsec enforcement client relies on health certificates and HRA servers to enforce health policies. If you are not using the IPsec enforcement client, you do not need to configure trusted server groups.</maml:para>
<maml:para><maml:navigationLink><maml:linkText>Create a Trusted Server Group</maml:linkText><maml:uri href="mshelp://windows/?id=baa45923-c5e1-4c3d-8c63-5ac0314c426b"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Delete a Trusted Server Group</maml:linkText><maml:uri href="mshelp://windows/?id=8d4418c1-341a-415d-84cb-d05e965b267b"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Add an HRA Server to a Trusted Server Group</maml:linkText><maml:uri href="mshelp://windows/?id=3430da0c-ac6b-4be5-a8b7-711cd7b5b9ee"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Remove an HRA Server from a Trusted Server Group</maml:linkText><maml:uri href="mshelp://windows/?id=43d81e16-de9f-472e-af03-1cf242f70351"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Change the Name of a Trusted Server Group</maml:linkText><maml:uri href="mshelp://windows/?id=8b4a25dd-4799-4f90-861e-5babc3f23315"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Change the Order of the HRA Servers in a Trusted Server Group</maml:linkText><maml:uri href="mshelp://windows/?id=d786ddc3-9d9b-43c4-9194-761d0aba18ed"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Change the URL of an HRA Server in a Trusted Server Group</maml:linkText><maml:uri href="mshelp://windows/?id=edecb289-f2b7-435b-8689-72a7adf77d95"></maml:uri></maml:navigationLink></maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure Health Registration Settings</maml:linkText><maml:uri href="mshelp://windows/?id=e5d79e75-b909-44d7-ac46-49bc9dca7f52"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Command-line syntax notation</maml:title><maml:introduction>
<maml:para>The following table describes the notation used to indicate command-line syntax.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Notation</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Text without brackets or braces</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Items you must type as shown</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><Text inside angle brackets></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Placeholder for which you must supply a value</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>[Text inside square brackets]</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Optional items</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>{Text inside braces}</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Set of required items; choose one</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Vertical bar (|)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Separator for mutually exclusive items; choose one</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Ellipsis (…)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Items that can be repeated</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Change the Name of a Trusted Server Group</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Changing the name of a trusted server group</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=8b4a25dd-4799-4f90-861e-5babc3f23315#trusted_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=8b4a25dd-4799-4f90-861e-5babc3f23315#trusted_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="trusted_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To change the name of a trusted server group by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Double-click <maml:ui>Health Registration Settings</maml:ui>, and then click <maml:ui>Trusted Server Groups</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the middle pane, right-click the name of your trusted server group, and then click <maml:ui>Rename</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the name of the trusted server group, and then press ENTER.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="trusted_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To change the name of a trusted server group by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client rename trustedservergroup name = <name> newname = <newname></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>The following table provides a guideline for the placeholder text in the Netsh command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Placeholder</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Possible Values</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><name></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any text string. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The name of the trusted server group that you are changing.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><newname></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any text string. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The new name of the trusted server group.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure Trusted Server Groups for NAP Clients</maml:linkText><maml:uri href="mshelp://windows/?id=6fec9d41-3361-4ce6-9694-742805e82136"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Delete a Trusted Server Group</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Deleting a trusted server group</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=8d4418c1-341a-415d-84cb-d05e965b267b#trusted_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=8d4418c1-341a-415d-84cb-d05e965b267b#trusted_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="trusted_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To delete a trusted server group by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Double-click <maml:ui>Health Registration Settings</maml:ui>, and then click <maml:ui>Trusted Server Groups</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the middle pane, right-click the name of your trusted server group, and then click <maml:ui>Delete</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="trusted_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To delete a trusted server group by using the command prompt</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client delete trustedservergroup name = <name></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>The following table provides a guideline for the placeholder text in the Netsh command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Placeholder</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Possible Values</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><name></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any text string. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The name of the trusted server group that you are deleting.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure Trusted Server Groups for NAP Clients</maml:linkText><maml:uri href="mshelp://windows/?id=6fec9d41-3361-4ce6-9694-742805e82136"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Specify Level of Detail in the NAP Tracing Log</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Specifying the detail that is recorded in the NAP trace log</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=a6f7a23f-4562-482c-9518-865b6f2c375e#trace_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=a6f7a23f-4562-482c-9518-865b6f2c375e#trace_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="trace_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To specify the detail that is recorded in the NAP trace log by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>NAP Client Configuration(Local Computer)</maml:ui>, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>NAP Client Configuration(Local Computer) Properties</maml:ui> dialog box, confirm that <maml:ui>Enabled</maml:ui> is selected.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Under <maml:ui>Specify the level of detail at which the tracing logs are written</maml:ui>, select <maml:ui>Basic</maml:ui>, <maml:ui>Advanced</maml:ui>, or <maml:ui>Debug</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="trace_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To specify the detail that is recorded in the NAP trace log by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To configure NAP tracing, do one of the following:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>To configure NAP tracing so that basic information is recorded, type: <maml:userInput>netsh nap client set tracing state</maml:userInput> = <maml:userInput>enable level</maml:userInput> = <maml:userInput>basic</maml:userInput></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To configure NAP tracing so that advanced information is recorded, type: <maml:userInput>netsh nap client set tracing state</maml:userInput> = <maml:userInput>enable level</maml:userInput> = <maml:userInput>advanced</maml:userInput></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To configure NAP tracing so that debug information is recorded, type: <maml:userInput>netsh nap client set tracing state</maml:userInput> = <maml:userInput>enable level</maml:userInput> = <maml:userInput>verbose</maml:userInput></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure NAP Tracing</maml:linkText><maml:uri href="mshelp://windows/?id=6dbc1518-e442-4f0d-b873-f44a17fa2c0f"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Enable and Disable NAP Tracing</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Enabling and disabling NAP tracing</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=aa0eb9ca-83e3-4bd2-bdca-a24f255a208f#tracing_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=aa0eb9ca-83e3-4bd2-bdca-a24f255a208f#tracing_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="tracing_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable or disable NAP tracing by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>NAP Client Configuration(Local Computer)</maml:ui>, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>NAP Client Configuration(Local Computer) Properties</maml:ui> dialog box, select <maml:ui>Enabled</maml:ui> or <maml:ui>Disabled</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="tracing_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable or disable NAP tracing by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To enable or disable NAP tracing, do one of the following:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>To enable NAP tracing, type: <maml:userInput>netsh nap client set tracing state</maml:userInput> = <maml:userInput>enable</maml:userInput></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To disable NAP tracing, type: <maml:userInput>netsh nap client set tracing state</maml:userInput> = <maml:userInput>disable</maml:userInput></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure NAP Tracing</maml:linkText><maml:uri href="mshelp://windows/?id=6dbc1518-e442-4f0d-b873-f44a17fa2c0f"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Export NAP Client Configuration Settings</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Exporting settings to a configuration file</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=b90925c6-42dc-41ed-8a3d-dda542ba62b3#configuring_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=b90925c6-42dc-41ed-8a3d-dda542ba62b3#configuring_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="configuring_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To export settings to a configuration file by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>NAP Client Configuration</maml:ui>, and then click <maml:ui>Export</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>Export NAP Configuration</maml:ui> dialog box, in <maml:ui>Save in</maml:ui>, click the location where you want to save the file.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>File name</maml:ui>, type a file name for the configuration file.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Save</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="configuring_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To export settings to a configuration file by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client export filename = <filename></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>The following table provides a guideline for the placeholder text in the Netsh command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Placeholder</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Possible Values</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><filename></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any string.</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The path and file name for the configuration file.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Import NAP Client Configuration Settings</maml:linkText><maml:uri href="mshelp://windows/?id=41703db7-1497-48a7-aa77-0bf2796675b2"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Command-line syntax notation</maml:linkText><maml:uri href="mshelp://windows/?id=7ed13aea-4580-4ecd-93ef-9b09b504b87a"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create a Trusted Server Group</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Creating a trusted server group</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=baa45923-c5e1-4c3d-8c63-5ac0314c426b#trusted_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=baa45923-c5e1-4c3d-8c63-5ac0314c426b#trusted_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="trusted_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To create a trusted server group by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Double-click <maml:ui>Health Registration Settings</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>Trusted Server Groups</maml:ui>, and then click <maml:ui>New</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Group Name</maml:ui> page of the New Trusted Server Group wizard, type the name of the new trusted server group, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Add Servers</maml:ui> page, type the URL of an HRA server you want to add to the trusted server group, and then click <maml:ui>Add</maml:ui>. If your HRA server does not use server verification, then you must clear the <maml:ui>Require server verification (https:) for all servers in this group</maml:ui> check box before clicking <maml:ui>Add</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Repeat step 5 until you have added all of the HRA servers to the trusted server group.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Next</maml:ui> to review the group name and the URLs of trusted servers, and then click <maml:ui>Finish</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="trusted_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To create a trusted server group by using the command prompt</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client add trustedservergroup name = <group> requirehttps = <requirehttps></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client add server group = <group> url = <url> processingorder = <processingorder></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>The following table provides a guideline for the placeholder text in the Netsh command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Placeholder</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Possible Values</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><group></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any text string. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The name of the trusted server group that you are creating.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><requirehttps></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>ENABLE, DISABLE (Optional)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>If set to DISABLE, then server verification (HTTPS) is not required. If no value is entered or requirehttps is set to ENABLE, then HTTPS is required.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><url></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any valid URL, UNC path, or IP address. If requirehttps is set to ENABLED, the URL must use the https:// prefix. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The URL of the HRA server that you want to add to the trusted server group. To add multiple URLs, reuse the same server group name.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><processingorder></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any integer less than or equal to the total number of trusted server groups. Cannot be zero (0). (Optional)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The processing priority to assign to this trusted server group.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure Trusted Server Groups for NAP Clients</maml:linkText><maml:uri href="mshelp://windows/?id=6fec9d41-3361-4ce6-9694-742805e82136"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>NAP Client Configuration Checklist</maml:title><maml:introduction>
<maml:para>Use the following checklist to help ensure that you correctly configure Network Access Protection (NAP) settings on client computers.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Step</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Review NAP client configuration concepts. (Optional)</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>NAP Client Configuration Overview</maml:linkText><maml:uri href="mshelp://windows/?id=55b4bdb3-0ca3-4e9a-b4e3-36a901a8e466"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Determine whether you want to import a configuration file. (Optional)</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Import NAP Client Configuration Settings</maml:linkText><maml:uri href="mshelp://windows/?id=41703db7-1497-48a7-aa77-0bf2796675b2"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Enable one or more NAP enforcement clients. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Configure NAP Enforcement Clients</maml:linkText><maml:uri href="mshelp://windows/?id=14d4df85-548d-4118-b0fb-7c7b7e881e4e"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Specify branding text and graphics for the NAP user interface. (Optional)</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Configure NAP Client Request Policy</maml:linkText><maml:uri href="mshelp://windows/?id=4b4ce8ad-5100-4418-bb6a-0f0f834b90b8"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Specify the Health Registration Authority (HRA) servers with which a client computer will communicate. (Optional)</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Configure Trusted Server Groups for NAP Clients</maml:linkText><maml:uri href="mshelp://windows/?id=6fec9d41-3361-4ce6-9694-742805e82136"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Specify the cryptographic mechanism that client computers use to communicate with HRA servers. (Optional)</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Configure NAP Client Request Policy</maml:linkText><maml:uri href="mshelp://windows/?id=4b4ce8ad-5100-4418-bb6a-0f0f834b90b8"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Configure NAP tracing and the level of detail you want to record in a tracing log file. (Optional)</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Configure NAP Tracing</maml:linkText><maml:uri href="mshelp://windows/?id=6dbc1518-e442-4f0d-b873-f44a17fa2c0f"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Determine whether you want to save NAP settings to a configuration file. (Optional)</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Export NAP Client Configuration Settings</maml:linkText><maml:uri href="mshelp://windows/?id=b90925c6-42dc-41ed-8a3d-dda542ba62b3"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Specify an Image for the NAP Client User Interface</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Specifying an image for the NAP client user interface</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=c964ab84-abc8-46d6-bc00-88729d2352fd#image_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=c964ab84-abc8-46d6-bc00-88729d2352fd#image_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="image_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To specify an image for the NAP client user interface by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>User Interface Settings</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>UI Settings</maml:ui>, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>UI Settings Properties</maml:ui> dialog box, click <maml:ui>Browse</maml:ui>, and then select the image that you want to appear in the NAP client user interface.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="image_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To specify an image for the NAP client user interface by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client set userinterface image = <image></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>The following table provides a guideline for the placeholder text in the Netsh command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Placeholder</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Possible Values</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><image></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The path to an image that is saved in one of the following file formats: .jpg, .bmp, .png, or .gif.</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The image that you want to display in the NAP client user interface.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>To concurrently specify the NAP client user interface title, description, and image, type: <maml:userInput>netsh nap client set userinterface title = <title> text = <text> image = <image></maml:userInput></maml:para>
</maml:alertSet>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure the NAP Client User Interface</maml:linkText><maml:uri href="mshelp://windows/?id=50ee545d-ea62-4fce-867a-a2afe2a826cf"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Command-line syntax notation</maml:linkText><maml:uri href="mshelp://windows/?id=7ed13aea-4580-4ecd-93ef-9b09b504b87a"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Enable and Disable the Wireless EAPOL Enforcement Client</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Enabling and disabling the wireless EAPOL enforcement client</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=cd393e57-8754-4725-be42-81830e83ece3#remote_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list><maml:alertSet class="note"><maml:title>Note </maml:title><maml:para>The wireless EAPOL enforcement client is only available on NAP client computers running Windows XP with Service Pack 3 (SP3). To enable the wireless EAPOL enforcement client, you must use Group Policy or a command line.</maml:para></maml:alertSet>
</maml:introduction></maml:section><maml:section address="remote_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable or disable the wireless EAPOL enforcement client by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To enable or disable the wireless EAPOL enforcement client, do one of the following:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>To enable the wireless EAPOL enforcement client, type: <maml:userInput>netsh nap client set enforcement ID = 79620 ADMIN = "ENABLE"</maml:userInput></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To disable the wireless EAPOL enforcement client, type: <maml:userInput>netsh nap client set enforcement ID = 79620 ADMIN = "DISABLE"</maml:userInput></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure NAP Enforcement Clients</maml:linkText><maml:uri href="mshelp://windows/?id=14d4df85-548d-4118-b0fb-7c7b7e881e4e"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Enable and Disable the DHCP Enforcement Client</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Enabling and disabling the DHCP enforcement client</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=d36703f0-2f47-4de5-a9a3-52fe013f01e2#DHCP_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=d36703f0-2f47-4de5-a9a3-52fe013f01e2#DHCP_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="DHCP_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable and disable the DHCP enforcement client by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Enforcement Clients</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>DHCP Enforcement Client</maml:ui>, and then click <maml:ui>Enable</maml:ui> or <maml:ui>Disable</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="DHCP_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable and disable the DHCP enforcement client by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To enable or disable the DHCP enforcement client, do one of the following:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>To enable the DHCP enforcement client, type: <maml:userInput>netsh nap client set enforcement ID = 79617 ADMIN = "ENABLE"</maml:userInput></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To disable the DHCP enforcement client, type: <maml:userInput>netsh nap client set enforcement ID = 79617 ADMIN = "DISABLE"</maml:userInput></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure NAP Enforcement Clients</maml:linkText><maml:uri href="mshelp://windows/?id=14d4df85-548d-4118-b0fb-7c7b7e881e4e"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>NAP Client Configuration</maml:title><maml:introduction>
<maml:para>Network Access Protection (NAP), a new feature in Windows Vista® and Windows Server® 2008, allows you to control the access of client computers to network resources based on computer identity and compliance with corporate governance policy. To implement NAP, you must configure NAP settings on both servers and client computers.</maml:para>
<maml:para>There are three tools that you can use to configure NAP client settings:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>The NAP Client Configuration console provides a graphical user interface with which you can configure NAP client settings on the local computer or in a configuration file that you can save and apply to other computers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The Netsh commands for NAP client provide a command-line tool that you can use to configure client computers or to create a configuration file that you can save and apply to other computers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you want to manage NAP client settings on domain member client computers, you can use the Group Policy Management Console and the Group Policy Management Editor. When you configure NAP client settings in Group Policy, these settings are applied on NAP-capable domain member client computers when Group Policy is refreshed.</maml:para>
</maml:listItem>
</maml:list><maml:alertSet class="important"><maml:title>Important </maml:title><maml:para>If you configure NAP client settings in Group Policy, the settings configured using the NAP client configuration console or the Netsh command-line tool will be ignored.</maml:para></maml:alertSet>
<maml:para>For an overview of managing client computers that are NAP-capable, see <maml:navigationLink><maml:linkText>NAP Client Configuration Overview</maml:linkText><maml:uri href="mshelp://windows/?id=55b4bdb3-0ca3-4e9a-b4e3-36a901a8e466"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>For a list of steps that guide you through the NAP client configuration process, see <maml:navigationLink><maml:linkText>NAP Client Configuration Checklist</maml:linkText><maml:uri href="mshelp://windows/?id=c6ff457f-d39e-40aa-bb33-2a98cc6bb922"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>To enable and disable NAP enforcement clients, see <maml:navigationLink><maml:linkText>Configure NAP Enforcement Clients</maml:linkText><maml:uri href="mshelp://windows/?id=14d4df85-548d-4118-b0fb-7c7b7e881e4e"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>To specify branding text and graphics for the NAP user interface, see <maml:navigationLink><maml:linkText>Configure the NAP Client User Interface</maml:linkText><maml:uri href="mshelp://windows/?id=50ee545d-ea62-4fce-867a-a2afe2a826cf"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>To specify the Health Registration Authority (HRA) servers with which a client computer communicates and to specify the cryptographic mechanism that client computers use to communicate with HRA servers, see <maml:navigationLink><maml:linkText>Configure Health Registration Settings</maml:linkText><maml:uri href="mshelp://windows/?id=e5d79e75-b909-44d7-ac46-49bc9dca7f52"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>To configure NAP tracing, see <maml:navigationLink><maml:linkText>Configure NAP Tracing</maml:linkText><maml:uri href="mshelp://windows/?id=6dbc1518-e442-4f0d-b873-f44a17fa2c0f"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>To create and manage configuration files that contain NAP settings, see <maml:navigationLink><maml:linkText>Use NAP Client Configuration Files</maml:linkText><maml:uri href="mshelp://windows/?id=5cb8e189-8317-46e0-bb9e-46fed8fc5311"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Change the Order of the HRA Servers in a Trusted Server Group</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Changing the order of the HRA servers in a trusted server group</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=d786ddc3-9d9b-43c4-9194-761d0aba18ed#order_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=d786ddc3-9d9b-43c4-9194-761d0aba18ed#order_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="order_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To change the order of the HRA servers in a trusted server group by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Double-click <maml:ui>Health Registration Settings</maml:ui>, and then click <maml:ui>Trusted Server Groups</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the middle pane, double-click the name of your trusted server group.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>Trusted Server Group Properties</maml:ui> dialog box, click the URL of a trusted server that you want to move up or down in the list, and then click <maml:ui>Move Up</maml:ui> or <maml:ui>Move Down</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="order_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To change the order of the HRA servers in a trusted server group by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client set server group = <group> url = <url> processingorder = <processingorder></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>The following table provides a guideline for the placeholder text in the Netsh command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Placeholder</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Possible Values</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><group></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any text string. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The name of the trusted server group that you are modifying.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><url></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any valid URL, UNC path, or IP address. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The URL of the HRA server that you want to move up or down in the trusted server group.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><processingorder></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any integer. Cannot be zero (0). (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The processing priority to assign to this HRA server.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure Trusted Server Groups for NAP Clients</maml:linkText><maml:uri href="mshelp://windows/?id=6fec9d41-3361-4ce6-9694-742805e82136"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>NAP Overview</maml:title><maml:introduction>
<maml:para>Network Access Protection (NAP) is one of the most anticipated features of the Windows Server® 2008 operating system. NAP is a new platform that allows network administrators to define levels of network access based on a client’s identity, the groups to which the client belongs, and the degree to which the client complies with corporate governance policy. If a client is not compliant, NAP provides a mechanism for automatically bringing the client into compliance (a process known as remediation) and then dynamically increasing its level of network access. NAP is supported by Windows® 7, Windows Vista®, Windows® XP with Service Pack 3 (SP3), Windows Server 2008, and Windows Server® 2008 R2.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title><maml:para>On NAP client computers running Windows 7, NAP is integrated into Action Center. If a NAP client computer is determined to be noncompliant with network health polices, you can obtain more information by reviewing the <maml:ui>Network Access Protection</maml:ui> category under <maml:ui>Security</maml:ui>. NAP client computers that are compliant with health requirements and computers that are not running the NAP Agent service do not display NAP information in Action Center.</maml:para></maml:alertSet>
<maml:para>NAP also includes an application programming interface (API) that developers and vendors can use to integrate their products and leverage this health state validation, access enforcement, and ongoing compliance evaluation. For more information about the NAP API, see Network Access Protection (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=128423</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=128423"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Specify a Cryptographic Service Provider</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Specifying a cryptographic service provider</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=dca429b7-8f8e-4658-befa-f2a212ff0f9d#crypto_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=dca429b7-8f8e-4658-befa-f2a212ff0f9d#crypto_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="crypto_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To specify a cryptographic service provider by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open <maml:ui>Health Registration Settings</maml:ui>, and click <maml:ui>Request Policy</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>Cryptographic Service Provider</maml:ui>, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>Cryptographic Service Provider Properties</maml:ui> dialog box, click <maml:ui>Specific</maml:ui>, and then click the cryptographic service provider you want to use.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you configure request policy settings on your client computers, you must configure identical request policy settings on your Health Registration Authority (HRA) servers. If your HRA servers are not configured to use exactly the same asymmetric key algorithm, hash key algorithm, and cryptographic service provider as your client computers, then your HRA servers will not be able to communicate with your client computers. Your client computers might be determined to be noncompliant and their network connectivity might be limited.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="crypto_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To specify a cryptographic service provider by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following to obtain a list of the cryptographic service providers that are supported on the client computer: <maml:userInput>netsh nap client show csps</maml:userInput></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client set csp name = <name> keylength = <keylength></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>The following table provides a guideline for the placeholder text in the Netsh command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Placeholder</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Possible Values</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><name></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any supported cryptographic service provider.</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The name of the cryptographic service provider you want to use to encrypt communication between a client computer and an HRA server.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><keylength></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any integer. (Optional)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the length of the asymmetric key. The default is 2048.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you configure request policy settings on your client computers, you must configure identical request policy settings on your HRA servers. If your HRA servers are not configured to use exactly the same asymmetric key algorithm, hash key algorithm, and cryptographic service provider as your client computers, then your HRA servers will not be able to communicate with your client computers. Your client computers might be determined to be noncompliant and their network connectivity might be limited.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure NAP Client Request Policy</maml:linkText><maml:uri href="mshelp://windows/?id=4b4ce8ad-5100-4418-bb6a-0f0f834b90b8"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure Health Registration Settings</maml:linkText><maml:uri href="mshelp://windows/?id=e5d79e75-b909-44d7-ac46-49bc9dca7f52"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configure Health Registration Settings</maml:title><maml:introduction>
<maml:para>You can use the NAP Client Configuration console to specify the security mechanisms that a client computer uses to communicate with Health Registration Authority (HRA) servers. In addition, you can use the NAP Client Configuration console to specify the HRA servers with which a client computer can communicate. A client computer must communicate with an HRA server to obtain a health certificate. A health certificate is required for NAP with Internet Protocol security (IPsec)-based enforcement.</maml:para>
<maml:para>To specify which security mechanism a client uses to communicate with an HRA server, you must configure the request policy. The request policy specifies the asymmetric key algorithm, hash algorithm, and cryptographic service provider a client computer uses when it initiates communication with an HRA server. You can specify only one asymmetric key algorithm, hash algorithm, and cryptographic service provider on a client computer.</maml:para>
<maml:para>When you configure an asymmetric key algorithm, hash algorithm, or cryptographic service provider on the client, you must configure exactly the same request policy on the HRA server. For example, if you configure your clients to encrypt communication using only the Rivest-Shamir-Adelman (RSA) asymmetric key algorithm with a minimum key length of 128, then you must configure your HRA servers to accept communication that is encrypted with exactly the same asymmetric key algorithm and exactly the same minimum key length. If your HRA servers and client computers are not configured to use the same request policy, then your HRA servers will not be able to communicate with your client computers; your client computers might be determined to be noncompliant and their network connectivity might be limited. If you do not configure request policy settings on a client computer, the client computer initiates a negotiation process with the HRA server using the default security mechanism for encrypting communication.</maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>You should not modify request policy settings unless you have thoroughly tested your request policy settings in a secure test environment. Altering request policy settings can cause your client computers to lose network connectivity.</maml:para>
</maml:alertSet>
<maml:para>To specify which HRA servers you want a client computer to communicate with, you must configure a trusted server group. A trusted server group consists of one or more HRA servers. If you have more than one HRA server in a trusted server group, you can specify the order in which client computers attempt to contact the servers. This is useful if you have several HRA servers in different network segments or domains and you want to prioritize which servers a client attempts to access first. You must configure at least one trusted server group; otherwise, a client computer will not know how to contact an HRA server to obtain a certificate of health.</maml:para>
<maml:para><maml:navigationLink><maml:linkText>Configure NAP Client Request Policy</maml:linkText><maml:uri href="mshelp://windows/?id=4b4ce8ad-5100-4418-bb6a-0f0f834b90b8"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Configure Trusted Server Groups for NAP Clients</maml:linkText><maml:uri href="mshelp://windows/?id=6fec9d41-3361-4ce6-9694-742805e82136"></maml:uri></maml:navigationLink></maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Client Configuration Overview</maml:linkText><maml:uri href="mshelp://windows/?id=55b4bdb3-0ca3-4e9a-b4e3-36a901a8e466"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Client Configuration Checklist</maml:linkText><maml:uri href="mshelp://windows/?id=c6ff457f-d39e-40aa-bb33-2a98cc6bb922"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Health Policies</maml:title><maml:introduction>
<maml:para>Health policies define which system health validators (SHVs) are evaluated, as well as how they are used to evaluate the health status of Network Access Protection (NAP) client computers. Based on the results of SHV checks, health policies classify client health status. When you create a health policy, you can enable one or more installed SHVs and select one of the following SHV checks.</maml:para>
<maml:para>You must select at least one SHV to use in a health policy. SHVs that are not selected in a health policy are not evaluated by the policy. The following types of SHV checks are available in a health policy:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>Client passes all SHV checks</maml:phrase>. Use this setting to create a health policy that requires a client computer to meet the requirements of all enabled SHVs. This is the most restrictive setting that you can use to evaluate compliant computers.
</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Client fails all SHV checks</maml:phrase>. Use this setting to create a health policy that requires a client computer to fail to meet requirements of all enabled SHVs. This is the least restrictive setting that you can use to evaluate noncompliant computers.
</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Client passes one or more SHV checks</maml:phrase>. Use this setting to create a health policy that requires a client computer to meet the requirements of at least one enabled SHV. This is the least restrictive setting that you can use to evaluate compliant computers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Client fails one or more SHV checks</maml:phrase>. Use this setting to create a health policy that requires a client computer to fail to meet requirements of at least one enabled SHV. This is the most restrictive setting that you can use to evaluate noncompliant computers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Client reported as transitional by one or more SHVs</maml:phrase>. Use this setting to create a health policy for clients that report a status of transitional in extended state information. To use this setting, the SHV must support extended state reporting as part of the health evaluation process. A transitional state indicates that required services on the client are not ready to report health status. The transitional state can be temporary. For example, a client might report a status of transitional if services have been recently started.
</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Client reported as infected by one or more SHVs</maml:phrase>. Use this setting to create a health policy for clients that report a status of infected in extended state information. To use this setting, the SHV must support extended state reporting as part of the health evaluation process. This extended state information is used primarily by an antivirus system health agent (SHA) that is capable of reporting that the client is infected with malicious software (also called malware) that it cannot remove.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Client reported as unknown by one or more SHVs</maml:phrase>. Use this setting to create a health policy for clients that report a status of unknown in extended state information. To use this setting, the SHV must support extended state reporting as part of the health evaluation process. An unknown state indicates that the credentials of the end host cannot be determined. The unknown state can be temporary.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Although some SHVs check multiple settings on a client computer, an SHV check is an evaluation of the client computer against all requirements of the SHV. For example, the Windows Security Health Validator (WSHV) can check client computers for multiple software requirements and settings. A client computer might pass some of these checks, but it must meet all requirements of the SHV to pass the SHV check.</maml:para>
<maml:para>The <maml:ui>Setting</maml:ui> option under <maml:ui>SHVs used in this health policy</maml:ui> is new in Windows Server 2008 R2. If an SHV supports the storing of multiple configurations, you can use this setting to choose one of these configurations to use with your health policy. If an SHV does not support the storing of multiple configurations, you must configure settings in the <maml:ui>Default Configuration</maml:ui>.</maml:para></maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Health Policy Servers</maml:linkText><maml:uri href="mshelp://windows/?id=12410d32-1ef1-476a-a4db-3b4ad8824cc9"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Change the URL of an HRA Server in a Trusted Server Group</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Changing the URL of an HRA server in a trusted server group</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=edecb289-f2b7-435b-8689-72a7adf77d95#URL_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=edecb289-f2b7-435b-8689-72a7adf77d95#URL_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="URL_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To change the URL of an HRA server in a trusted server group by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Double-click <maml:ui>Health Registration Settings</maml:ui>, and then click <maml:ui>Trusted Server Groups</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the middle pane, double-click the name of your trusted server group.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>Trusted Server Group Properties</maml:ui> dialog box, click the URL of a trusted server that you want to change, and then click <maml:ui>Edit</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>Edit URL</maml:ui> dialog box, type the URL of the trusted server, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="URL_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To change the URL of an HRA server in a trusted server group by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type: <maml:userInput>netsh nap client rename server group = <group> url = <url> newurl = <newurl></maml:userInput></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>The following table provides a guideline for the placeholder text in the Netsh command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Placeholder</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Possible Values</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><group></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any text string. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The name of the trusted server group that you are modifying.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><url></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any text string. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The URL of the HRA server that you want to change.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:userInput><newurl></maml:userInput></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Any text string. (Required)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The new URL of the HRA server.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure Trusted Server Groups for NAP Clients</maml:linkText><maml:uri href="mshelp://windows/?id=6fec9d41-3361-4ce6-9694-742805e82136"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>System Health Validators</maml:title><maml:introduction>
<maml:para>When a NAP client computer is connected to the network, it is monitored to ensure it is current with health requirements. A Network Access Protection (NAP) client computer is able to monitor health status continuously by using software called system health agents (SHAs). Health requirements are defined on NAP servers using corresponding software called system health validators (SHVs). Many different types of SHA and SHVs are available.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Windows Security Health Validator</maml:title><maml:introduction>
<maml:para>The Windows Security Health Validator (WSHV) is included with Windows Server 2008 and Windows Server 2008 R2. The WSHV evaluates the operational status of the following components on NAP client computers:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>Firewall:</maml:phrase> If this requirement is enabled, the client computer must have a firewall that is registered with Windows Security Center and enabled for all network connections.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Virus Protection:</maml:phrase> If this requirement is enabled, the client computer must have an antivirus application installed, registered with Windows Security Center, and turned on. The client computer can also be checked to ensure that the antivirus signature file is up-to-date.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Spyware Protection:</maml:phrase> If this requirement is enabled, the client computer must have an antispyware application installed, registered with Windows Security Center, and turned on. The client computer can also be checked to ensure that the antispyware signature file is up-to-date. Spyware protection applies only to NAP clients running Windows Vista or Windows 7.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Automatic Updating:</maml:phrase> If this requirement is enabled, the client computer must be configured to check for updates from Windows Update. You can choose whether to download and install them.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Security Update Protection:</maml:phrase> If this requirement is enabled, the client computer must have security updates installed based on one of four possible values that match security severity ratings from the Microsoft Security Response Center (MSRC). The client must also check for these updates during a specified time interval. You can use Windows Server Update Services (WSUS), Windows Update, or both to obtain security updates.</maml:para>
</maml:listItem>
</maml:list></maml:introduction></maml:section><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Health Policy Servers</maml:linkText><maml:uri href="mshelp://windows/?id=12410d32-1ef1-476a-a4db-3b4ad8824cc9"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>System Health Validator Settings</maml:linkText><maml:uri href="mshelp://windows/?id=396c8b17-fdc0-43dc-8419-31311f8ac665"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>System Health Validator Error Codes</maml:linkText><maml:uri href="mshelp://windows/?id=499cfc22-34ea-4f71-9c44-d7ffbb838e00"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Enable and Disable the RD Gateway Enforcement Client</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Enabling and disabling the RD Gateway enforcement client</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=fde67fdd-6549-4dad-b5f3-120edb1d80e2#remote_UI"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=fde67fdd-6549-4dad-b5f3-120edb1d80e2#remote_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="remote_UI"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable and disable the RD Gateway enforcement client by using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open the NAP Client Configuration console, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>NAPCLCFG.MSC</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Enforcement Clients</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click <maml:ui>RD Gateway Quarantine Enforcement Client</maml:ui>, and then click <maml:ui>Enable</maml:ui> or <maml:ui>Disable</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section address="remote_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable or disable the RD Gateway enforcement client by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, and then click <maml:ui>Command Prompt</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To enable or disable the RD Gateway enforcement client, do one of the following:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>To enable the RD Gateway enforcement client, type: <maml:userInput>netsh nap client set enforcement ID = 79621 ADMIN = "ENABLE"</maml:userInput></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To disable the RD Gateway enforcement client, type: <maml:userInput>netsh nap client set enforcement ID = 79621 ADMIN = "DISABLE"</maml:userInput></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Configure NAP Enforcement Clients</maml:linkText><maml:uri href="mshelp://windows/?id=14d4df85-548d-4118-b0fb-7c7b7e881e4e"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Connection Request Policies</maml:title><maml:introduction>
<maml:para>Connection request policies use conditions and settings to authenticate network access requests and govern where this authentication is performed. One connection request policy is required for each Network Access Protection (NAP) enforcement method that is deployed. When you select a network connection method using the NAP configuration wizard, connection request policies are configured with the required authentication settings automatically.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>NAP Health Policy Servers</maml:linkText><maml:uri href="mshelp://windows/?id=12410d32-1ef1-476a-a4db-3b4ad8824cc9"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><?xml version="1.0" encoding="utf-8"?>
<HelpCollection Id="nap" DTDVersion="1.0" FileVersion="" LangId="1033" Copyright="© 2005 Microsoft Corporation. All rights reserved." Title="Network Access Protection" xmlns="http://schemas.microsoft.com/help/collection/2004/11">
<CompilerOptions CompileResult="H1S" CreateFullTextIndex="Yes" BreakerId="Microsoft.NLG.en.WordBreaker">
<IncludeFile File="nap.H1F" />
</CompilerOptions>
<TOCDef File="nap.H1T" Id="nap_TOC" />
<VTopicDef File="nap.H1V" />
<KeywordIndexDef File="nap_AssetId.H1K" />
<KeywordIndexDef File="nap_BestBet.H1K" />
<KeywordIndexDef File="nap_LinkTerm.H1K" />
<KeywordIndexDef File="nap_SubjectTerm.H1K" />
<ItemMoniker Name="!DefaultTOC" ProgId="HxDs.HxHierarchy" InitData="AnyString" />
<ItemMoniker Name="!DefaultFullTextSearch" ProgId="HxDs.HxFullTextSearch" InitData="AnyString" />
<ItemMoniker Name="!DefaultAssetIdIndex" ProgId="HxDs.HxIndex" InitData="AssetId" />
<ItemMoniker Name="!DefaultBestBetIndex" ProgId="HxDs.HxIndex" InitData="BestBet" />
<ItemMoniker Name="!DefaultAssociativeIndex" ProgId="HxDs.HxIndex" InitData="LinkTerm" />
<ItemMoniker Name="!DefaultKeywordIndex" ProgId="HxDs.HxIndex" InitData="SubjectTerm" />
</HelpCollection><?xml version="1.0" encoding="utf-8"?>
<HelpFileList xmlns="http://schemas.microsoft.com/help/filelist/2004/11">
<File Url="assets\0031a461-1827-4ac7-bfa4-f3350766811d.xml" />
<File Url="assets\06a1320e-fce7-4132-83ab-84557ccc111e.xml" />
<File Url="assets\0d11bde9-b56a-418b-8681-18f60c2fa56c.xml" />
<File Url="assets\10ff66bc-4217-45fc-b382-b6ddd09cc149.xml" />
<File Url="assets\12410d32-1ef1-476a-a4db-3b4ad8824cc9.xml" />
<File Url="assets\14d4df85-548d-4118-b0fb-7c7b7e881e4e.xml" />
<File Url="assets\2460f157-0771-4c9e-a23b-78a488825506.xml" />
<File Url="assets\3430da0c-ac6b-4be5-a8b7-711cd7b5b9ee.xml" />
<File Url="assets\349393fd-5213-4acd-af32-1b84a898f8b6.xml" />
<File Url="assets\396c8b17-fdc0-43dc-8419-31311f8ac665.xml" />
<File Url="assets\3ac6ef9e-88c6-4656-b6bd-75aab87c4f41.xml" />
<File Url="assets\41703db7-1497-48a7-aa77-0bf2796675b2.xml" />
<File Url="assets\43d81e16-de9f-472e-af03-1cf242f70351.xml" />
<File Url="assets\47d149f8-2e1a-48c7-b421-3033b90f8c43.xml" />
<File Url="assets\499cfc22-34ea-4f71-9c44-d7ffbb838e00.xml" />
<File Url="assets\4b4ce8ad-5100-4418-bb6a-0f0f834b90b8.xml" />
<File Url="assets\50ee545d-ea62-4fce-867a-a2afe2a826cf.xml" />
<File Url="assets\55b4bdb3-0ca3-4e9a-b4e3-36a901a8e466.xml" />
<File Url="assets\5cb8e189-8317-46e0-bb9e-46fed8fc5311.xml" />
<File Url="assets\5df05e73-26a1-458a-802c-3a0573359b5e.xml" />
<File Url="assets\613c9b94-d747-49a6-a748-a9aa189b5c4f.xml" />
<File Url="assets\6dbc1518-e442-4f0d-b873-f44a17fa2c0f.xml" />
<File Url="assets\6fec9d41-3361-4ce6-9694-742805e82136.xml" />
<File Url="assets\7ed13aea-4580-4ecd-93ef-9b09b504b87a.xml" />
<File Url="assets\8b4a25dd-4799-4f90-861e-5babc3f23315.xml" />
<File Url="assets\8d4418c1-341a-415d-84cb-d05e965b267b.xml" />
<File Url="assets\a6f7a23f-4562-482c-9518-865b6f2c375e.xml" />
<File Url="assets\aa0eb9ca-83e3-4bd2-bdca-a24f255a208f.xml" />
<File Url="assets\b90925c6-42dc-41ed-8a3d-dda542ba62b3.xml" />
<File Url="assets\baa45923-c5e1-4c3d-8c63-5ac0314c426b.xml" />
<File Url="assets\c6ff457f-d39e-40aa-bb33-2a98cc6bb922.xml" />
<File Url="assets\c964ab84-abc8-46d6-bc00-88729d2352fd.xml" />
<File Url="assets\cd393e57-8754-4725-be42-81830e83ece3.xml" />
<File Url="assets\d36703f0-2f47-4de5-a9a3-52fe013f01e2.xml" />
<File Url="assets\d6a94a33-03cd-4306-a324-3ff9a996ff9a.xml" />
<File Url="assets\d786ddc3-9d9b-43c4-9194-761d0aba18ed.xml" />
<File Url="assets\d95cfa9c-cc16-495a-b3a4-38258ca7f3a0.xml" />
<File Url="assets\dca429b7-8f8e-4658-befa-f2a212ff0f9d.xml" />
<File Url="assets\e5d79e75-b909-44d7-ac46-49bc9dca7f52.xml" />
<File Url="assets\e6d4a126-73ed-43fe-978f-a09dd0033fda.xml" />
<File Url="assets\edecb289-f2b7-435b-8689-72a7adf77d95.xml" />
<File Url="assets\f8eb3df9-d112-45d8-89eb-669acb2bed52.xml" />
<File Url="assets\fde67fdd-6549-4dad-b5f3-120edb1d80e2.xml" />
<File Url="assets\ff3dab67-7903-498b-bd22-88a09c732b45.xml" />
</HelpFileList><?xml version="1.0" encoding="utf-8"?>
<VTopicSet DTDVersion="1.0" xmlns="http://schemas.microsoft.com/help/vtopic/2004/11">
<Vtopic Url="assets\0031a461-1827-4ac7-bfa4-f3350766811d.xml" RLTitle="Specify a Hash Algorithm">
<Attr Name="assetid" Value="0031a461-1827-4ac7-bfa4-f3350766811d" />
<Keyword Index="AssetId" Term="0031a461-1827-4ac7-bfa4-f3350766811d" />
<Keyword Index="AssetId" Term="0031a461-1827-4ac7-bfa4-f3350766811d1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="0031a461-1827-4ac7-bfa4-f3350766811d" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\06a1320e-fce7-4132-83ab-84557ccc111e.xml" RLTitle="RADIUS Clients and Servers">
<Attr Name="assetid" Value="06a1320e-fce7-4132-83ab-84557ccc111e" />
<Keyword Index="AssetId" Term="06a1320e-fce7-4132-83ab-84557ccc111e" />
<Keyword Index="AssetId" Term="06a1320e-fce7-4132-83ab-84557ccc111e1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="06a1320e-fce7-4132-83ab-84557ccc111e" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\0d11bde9-b56a-418b-8681-18f60c2fa56c.xml" RLTitle="Network Policies">
<Attr Name="assetid" Value="0d11bde9-b56a-418b-8681-18f60c2fa56c" />
<Keyword Index="AssetId" Term="0d11bde9-b56a-418b-8681-18f60c2fa56c" />
<Keyword Index="AssetId" Term="0d11bde9-b56a-418b-8681-18f60c2fa56c1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="0d11bde9-b56a-418b-8681-18f60c2fa56c" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\10ff66bc-4217-45fc-b382-b6ddd09cc149.xml" RLTitle="Enable and Disable the IPsec Enforcement Client">
<Attr Name="assetid" Value="10ff66bc-4217-45fc-b382-b6ddd09cc149" />
<Keyword Index="AssetId" Term="10ff66bc-4217-45fc-b382-b6ddd09cc149" />
<Keyword Index="AssetId" Term="10ff66bc-4217-45fc-b382-b6ddd09cc1491033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="10ff66bc-4217-45fc-b382-b6ddd09cc149" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\12410d32-1ef1-476a-a4db-3b4ad8824cc9.xml" RLTitle="NAP Health Policy Servers">
<Attr Name="assetid" Value="12410d32-1ef1-476a-a4db-3b4ad8824cc9" />
<Keyword Index="AssetId" Term="12410d32-1ef1-476a-a4db-3b4ad8824cc9" />
<Keyword Index="AssetId" Term="12410d32-1ef1-476a-a4db-3b4ad8824cc91033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="12410d32-1ef1-476a-a4db-3b4ad8824cc9" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\14d4df85-548d-4118-b0fb-7c7b7e881e4e.xml" RLTitle="Configure NAP Enforcement Clients">
<Attr Name="assetid" Value="14d4df85-548d-4118-b0fb-7c7b7e881e4e" />
<Keyword Index="AssetId" Term="14d4df85-548d-4118-b0fb-7c7b7e881e4e" />
<Keyword Index="AssetId" Term="14d4df85-548d-4118-b0fb-7c7b7e881e4e1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="14d4df85-548d-4118-b0fb-7c7b7e881e4e" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\2460f157-0771-4c9e-a23b-78a488825506.xml" RLTitle="Enable and Disable the Remote Access Enforcement Client">
<Attr Name="assetid" Value="2460f157-0771-4c9e-a23b-78a488825506" />
<Keyword Index="AssetId" Term="2460f157-0771-4c9e-a23b-78a488825506" />
<Keyword Index="AssetId" Term="2460f157-0771-4c9e-a23b-78a4888255061033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="2460f157-0771-4c9e-a23b-78a488825506" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\3430da0c-ac6b-4be5-a8b7-711cd7b5b9ee.xml" RLTitle="Add an HRA Server to a Trusted Server Group">
<Attr Name="assetid" Value="3430da0c-ac6b-4be5-a8b7-711cd7b5b9ee" />
<Keyword Index="AssetId" Term="3430da0c-ac6b-4be5-a8b7-711cd7b5b9ee" />
<Keyword Index="AssetId" Term="3430da0c-ac6b-4be5-a8b7-711cd7b5b9ee1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="3430da0c-ac6b-4be5-a8b7-711cd7b5b9ee" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\349393fd-5213-4acd-af32-1b84a898f8b6.xml" RLTitle="Remediation Server Groups">
<Attr Name="assetid" Value="349393fd-5213-4acd-af32-1b84a898f8b6" />
<Keyword Index="AssetId" Term="349393fd-5213-4acd-af32-1b84a898f8b6" />
<Keyword Index="AssetId" Term="349393fd-5213-4acd-af32-1b84a898f8b61033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="349393fd-5213-4acd-af32-1b84a898f8b6" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\396c8b17-fdc0-43dc-8419-31311f8ac665.xml" RLTitle="System Health Validator Settings">
<Attr Name="assetid" Value="396c8b17-fdc0-43dc-8419-31311f8ac665" />
<Keyword Index="AssetId" Term="396c8b17-fdc0-43dc-8419-31311f8ac665" />
<Keyword Index="AssetId" Term="396c8b17-fdc0-43dc-8419-31311f8ac6651033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="396c8b17-fdc0-43dc-8419-31311f8ac665" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\3ac6ef9e-88c6-4656-b6bd-75aab87c4f41.xml" RLTitle="Specify Title Text for the NAP Client User Interface">
<Attr Name="assetid" Value="3ac6ef9e-88c6-4656-b6bd-75aab87c4f41" />
<Keyword Index="AssetId" Term="3ac6ef9e-88c6-4656-b6bd-75aab87c4f41" />
<Keyword Index="AssetId" Term="3ac6ef9e-88c6-4656-b6bd-75aab87c4f411033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="3ac6ef9e-88c6-4656-b6bd-75aab87c4f41" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\41703db7-1497-48a7-aa77-0bf2796675b2.xml" RLTitle="Import NAP Client Configuration Settings">
<Attr Name="assetid" Value="41703db7-1497-48a7-aa77-0bf2796675b2" />
<Keyword Index="AssetId" Term="41703db7-1497-48a7-aa77-0bf2796675b2" />
<Keyword Index="AssetId" Term="41703db7-1497-48a7-aa77-0bf2796675b21033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="41703db7-1497-48a7-aa77-0bf2796675b2" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\43d81e16-de9f-472e-af03-1cf242f70351.xml" RLTitle="Remove an HRA Server from a Trusted Server Group">
<Attr Name="assetid" Value="43d81e16-de9f-472e-af03-1cf242f70351" />
<Keyword Index="AssetId" Term="43d81e16-de9f-472e-af03-1cf242f70351" />
<Keyword Index="AssetId" Term="43d81e16-de9f-472e-af03-1cf242f703511033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="43d81e16-de9f-472e-af03-1cf242f70351" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\47d149f8-2e1a-48c7-b421-3033b90f8c43.xml" RLTitle="Specify Description Text for the NAP Client User Interface">
<Attr Name="assetid" Value="47d149f8-2e1a-48c7-b421-3033b90f8c43" />
<Keyword Index="AssetId" Term="47d149f8-2e1a-48c7-b421-3033b90f8c43" />
<Keyword Index="AssetId" Term="47d149f8-2e1a-48c7-b421-3033b90f8c431033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="47d149f8-2e1a-48c7-b421-3033b90f8c43" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\499cfc22-34ea-4f71-9c44-d7ffbb838e00.xml" RLTitle="System Health Validator Error Codes">
<Attr Name="assetid" Value="499cfc22-34ea-4f71-9c44-d7ffbb838e00" />
<Keyword Index="AssetId" Term="499cfc22-34ea-4f71-9c44-d7ffbb838e00" />
<Keyword Index="AssetId" Term="499cfc22-34ea-4f71-9c44-d7ffbb838e001033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="499cfc22-34ea-4f71-9c44-d7ffbb838e00" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\4b4ce8ad-5100-4418-bb6a-0f0f834b90b8.xml" RLTitle="Configure NAP Client Request Policy">
<Attr Name="assetid" Value="4b4ce8ad-5100-4418-bb6a-0f0f834b90b8" />
<Keyword Index="AssetId" Term="4b4ce8ad-5100-4418-bb6a-0f0f834b90b8" />
<Keyword Index="AssetId" Term="4b4ce8ad-5100-4418-bb6a-0f0f834b90b81033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="4b4ce8ad-5100-4418-bb6a-0f0f834b90b8" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\50ee545d-ea62-4fce-867a-a2afe2a826cf.xml" RLTitle="Configure the NAP Client User Interface">
<Attr Name="assetid" Value="50ee545d-ea62-4fce-867a-a2afe2a826cf" />
<Keyword Index="AssetId" Term="50ee545d-ea62-4fce-867a-a2afe2a826cf" />
<Keyword Index="AssetId" Term="50ee545d-ea62-4fce-867a-a2afe2a826cf1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="50ee545d-ea62-4fce-867a-a2afe2a826cf" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\55b4bdb3-0ca3-4e9a-b4e3-36a901a8e466.xml" RLTitle="NAP Client Configuration Overview">
<Attr Name="assetid" Value="55b4bdb3-0ca3-4e9a-b4e3-36a901a8e466" />
<Keyword Index="AssetId" Term="55b4bdb3-0ca3-4e9a-b4e3-36a901a8e466" />
<Keyword Index="AssetId" Term="55b4bdb3-0ca3-4e9a-b4e3-36a901a8e4661033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="55b4bdb3-0ca3-4e9a-b4e3-36a901a8e466" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\5cb8e189-8317-46e0-bb9e-46fed8fc5311.xml" RLTitle="Use NAP Client Configuration Files">
<Attr Name="assetid" Value="5cb8e189-8317-46e0-bb9e-46fed8fc5311" />
<Keyword Index="AssetId" Term="5cb8e189-8317-46e0-bb9e-46fed8fc5311" />
<Keyword Index="AssetId" Term="5cb8e189-8317-46e0-bb9e-46fed8fc53111033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="5cb8e189-8317-46e0-bb9e-46fed8fc5311" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\5df05e73-26a1-458a-802c-3a0573359b5e.xml" RLTitle="NAP Infrastructure">
<Attr Name="assetid" Value="5df05e73-26a1-458a-802c-3a0573359b5e" />
<Keyword Index="AssetId" Term="5df05e73-26a1-458a-802c-3a0573359b5e" />
<Keyword Index="AssetId" Term="5df05e73-26a1-458a-802c-3a0573359b5e1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="5df05e73-26a1-458a-802c-3a0573359b5e" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\613c9b94-d747-49a6-a748-a9aa189b5c4f.xml" RLTitle="Enable and Disable the EAP Enforcement Client">
<Attr Name="assetid" Value="613c9b94-d747-49a6-a748-a9aa189b5c4f" />
<Keyword Index="AssetId" Term="613c9b94-d747-49a6-a748-a9aa189b5c4f" />
<Keyword Index="AssetId" Term="613c9b94-d747-49a6-a748-a9aa189b5c4f1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="613c9b94-d747-49a6-a748-a9aa189b5c4f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\6dbc1518-e442-4f0d-b873-f44a17fa2c0f.xml" RLTitle="Configure NAP Tracing">
<Attr Name="assetid" Value="6dbc1518-e442-4f0d-b873-f44a17fa2c0f" />
<Keyword Index="AssetId" Term="6dbc1518-e442-4f0d-b873-f44a17fa2c0f" />
<Keyword Index="AssetId" Term="6dbc1518-e442-4f0d-b873-f44a17fa2c0f1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="6dbc1518-e442-4f0d-b873-f44a17fa2c0f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\6fec9d41-3361-4ce6-9694-742805e82136.xml" RLTitle="Configure Trusted Server Groups for NAP Clients">
<Attr Name="assetid" Value="6fec9d41-3361-4ce6-9694-742805e82136" />
<Keyword Index="AssetId" Term="6fec9d41-3361-4ce6-9694-742805e82136" />
<Keyword Index="AssetId" Term="6fec9d41-3361-4ce6-9694-742805e821361033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="6fec9d41-3361-4ce6-9694-742805e82136" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\7ed13aea-4580-4ecd-93ef-9b09b504b87a.xml" RLTitle="Command-line syntax notation">
<Attr Name="assetid" Value="7ed13aea-4580-4ecd-93ef-9b09b504b87a" />
<Keyword Index="AssetId" Term="7ed13aea-4580-4ecd-93ef-9b09b504b87a" />
<Keyword Index="AssetId" Term="7ed13aea-4580-4ecd-93ef-9b09b504b87a1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="appliesToProduct" Value="Windows Vista" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="appliesToSite" Value="VistaITPro" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7ed13aea-4580-4ecd-93ef-9b09b504b87a" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\8b4a25dd-4799-4f90-861e-5babc3f23315.xml" RLTitle="Change the Name of a Trusted Server Group">
<Attr Name="assetid" Value="8b4a25dd-4799-4f90-861e-5babc3f23315" />
<Keyword Index="AssetId" Term="8b4a25dd-4799-4f90-861e-5babc3f23315" />
<Keyword Index="AssetId" Term="8b4a25dd-4799-4f90-861e-5babc3f233151033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="8b4a25dd-4799-4f90-861e-5babc3f23315" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\8d4418c1-341a-415d-84cb-d05e965b267b.xml" RLTitle="Delete a Trusted Server Group">
<Attr Name="assetid" Value="8d4418c1-341a-415d-84cb-d05e965b267b" />
<Keyword Index="AssetId" Term="8d4418c1-341a-415d-84cb-d05e965b267b" />
<Keyword Index="AssetId" Term="8d4418c1-341a-415d-84cb-d05e965b267b1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="8d4418c1-341a-415d-84cb-d05e965b267b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\a6f7a23f-4562-482c-9518-865b6f2c375e.xml" RLTitle="Specify Level of Detail in the NAP Tracing Log">
<Attr Name="assetid" Value="a6f7a23f-4562-482c-9518-865b6f2c375e" />
<Keyword Index="AssetId" Term="a6f7a23f-4562-482c-9518-865b6f2c375e" />
<Keyword Index="AssetId" Term="a6f7a23f-4562-482c-9518-865b6f2c375e1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="a6f7a23f-4562-482c-9518-865b6f2c375e" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\aa0eb9ca-83e3-4bd2-bdca-a24f255a208f.xml" RLTitle="Enable and Disable NAP Tracing">
<Attr Name="assetid" Value="aa0eb9ca-83e3-4bd2-bdca-a24f255a208f" />
<Keyword Index="AssetId" Term="aa0eb9ca-83e3-4bd2-bdca-a24f255a208f" />
<Keyword Index="AssetId" Term="aa0eb9ca-83e3-4bd2-bdca-a24f255a208f1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="aa0eb9ca-83e3-4bd2-bdca-a24f255a208f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\b90925c6-42dc-41ed-8a3d-dda542ba62b3.xml" RLTitle="Export NAP Client Configuration Settings">
<Attr Name="assetid" Value="b90925c6-42dc-41ed-8a3d-dda542ba62b3" />
<Keyword Index="AssetId" Term="b90925c6-42dc-41ed-8a3d-dda542ba62b3" />
<Keyword Index="AssetId" Term="b90925c6-42dc-41ed-8a3d-dda542ba62b31033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="b90925c6-42dc-41ed-8a3d-dda542ba62b3" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\baa45923-c5e1-4c3d-8c63-5ac0314c426b.xml" RLTitle="Create a Trusted Server Group">
<Attr Name="assetid" Value="baa45923-c5e1-4c3d-8c63-5ac0314c426b" />
<Keyword Index="AssetId" Term="baa45923-c5e1-4c3d-8c63-5ac0314c426b" />
<Keyword Index="AssetId" Term="baa45923-c5e1-4c3d-8c63-5ac0314c426b1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="baa45923-c5e1-4c3d-8c63-5ac0314c426b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\c6ff457f-d39e-40aa-bb33-2a98cc6bb922.xml" RLTitle="NAP Client Configuration Checklist">
<Attr Name="assetid" Value="c6ff457f-d39e-40aa-bb33-2a98cc6bb922" />
<Keyword Index="AssetId" Term="c6ff457f-d39e-40aa-bb33-2a98cc6bb922" />
<Keyword Index="AssetId" Term="c6ff457f-d39e-40aa-bb33-2a98cc6bb9221033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="c6ff457f-d39e-40aa-bb33-2a98cc6bb922" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\c964ab84-abc8-46d6-bc00-88729d2352fd.xml" RLTitle="Specify an Image for the NAP Client User Interface">
<Attr Name="assetid" Value="c964ab84-abc8-46d6-bc00-88729d2352fd" />
<Keyword Index="AssetId" Term="c964ab84-abc8-46d6-bc00-88729d2352fd" />
<Keyword Index="AssetId" Term="c964ab84-abc8-46d6-bc00-88729d2352fd1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="c964ab84-abc8-46d6-bc00-88729d2352fd" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\cd393e57-8754-4725-be42-81830e83ece3.xml" RLTitle="Enable and Disable the Wireless EAPOL Enforcement Client">
<Attr Name="assetid" Value="cd393e57-8754-4725-be42-81830e83ece3" />
<Keyword Index="AssetId" Term="cd393e57-8754-4725-be42-81830e83ece3" />
<Keyword Index="AssetId" Term="cd393e57-8754-4725-be42-81830e83ece31033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="cd393e57-8754-4725-be42-81830e83ece3" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\d36703f0-2f47-4de5-a9a3-52fe013f01e2.xml" RLTitle="Enable and Disable the DHCP Enforcement Client">
<Attr Name="assetid" Value="d36703f0-2f47-4de5-a9a3-52fe013f01e2" />
<Keyword Index="AssetId" Term="d36703f0-2f47-4de5-a9a3-52fe013f01e2" />
<Keyword Index="AssetId" Term="d36703f0-2f47-4de5-a9a3-52fe013f01e21033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="d36703f0-2f47-4de5-a9a3-52fe013f01e2" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\d6a94a33-03cd-4306-a324-3ff9a996ff9a.xml" RLTitle="NAP Client Configuration">
<Attr Name="assetid" Value="d6a94a33-03cd-4306-a324-3ff9a996ff9a" />
<Keyword Index="AssetId" Term="d6a94a33-03cd-4306-a324-3ff9a996ff9a" />
<Keyword Index="AssetId" Term="d6a94a33-03cd-4306-a324-3ff9a996ff9a1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="d6a94a33-03cd-4306-a324-3ff9a996ff9a" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\d786ddc3-9d9b-43c4-9194-761d0aba18ed.xml" RLTitle="Change the Order of the HRA Servers in a Trusted Server Group">
<Attr Name="assetid" Value="d786ddc3-9d9b-43c4-9194-761d0aba18ed" />
<Keyword Index="AssetId" Term="d786ddc3-9d9b-43c4-9194-761d0aba18ed" />
<Keyword Index="AssetId" Term="d786ddc3-9d9b-43c4-9194-761d0aba18ed1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="d786ddc3-9d9b-43c4-9194-761d0aba18ed" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\d95cfa9c-cc16-495a-b3a4-38258ca7f3a0.xml" RLTitle="NAP Overview">
<Attr Name="assetid" Value="d95cfa9c-cc16-495a-b3a4-38258ca7f3a0" />
<Keyword Index="AssetId" Term="d95cfa9c-cc16-495a-b3a4-38258ca7f3a0" />
<Keyword Index="AssetId" Term="d95cfa9c-cc16-495a-b3a4-38258ca7f3a01033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="d95cfa9c-cc16-495a-b3a4-38258ca7f3a0" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\dca429b7-8f8e-4658-befa-f2a212ff0f9d.xml" RLTitle="Specify a Cryptographic Service Provider">
<Attr Name="assetid" Value="dca429b7-8f8e-4658-befa-f2a212ff0f9d" />
<Keyword Index="AssetId" Term="dca429b7-8f8e-4658-befa-f2a212ff0f9d" />
<Keyword Index="AssetId" Term="dca429b7-8f8e-4658-befa-f2a212ff0f9d1033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="dca429b7-8f8e-4658-befa-f2a212ff0f9d" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\e5d79e75-b909-44d7-ac46-49bc9dca7f52.xml" RLTitle="Configure Health Registration Settings">
<Attr Name="assetid" Value="e5d79e75-b909-44d7-ac46-49bc9dca7f52" />
<Keyword Index="AssetId" Term="e5d79e75-b909-44d7-ac46-49bc9dca7f52" />
<Keyword Index="AssetId" Term="e5d79e75-b909-44d7-ac46-49bc9dca7f521033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e5d79e75-b909-44d7-ac46-49bc9dca7f52" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\e6d4a126-73ed-43fe-978f-a09dd0033fda.xml" RLTitle="Health Policies">
<Attr Name="assetid" Value="e6d4a126-73ed-43fe-978f-a09dd0033fda" />
<Keyword Index="AssetId" Term="e6d4a126-73ed-43fe-978f-a09dd0033fda" />
<Keyword Index="AssetId" Term="e6d4a126-73ed-43fe-978f-a09dd0033fda1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e6d4a126-73ed-43fe-978f-a09dd0033fda" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\edecb289-f2b7-435b-8689-72a7adf77d95.xml" RLTitle="Change the URL of an HRA Server in a Trusted Server Group">
<Attr Name="assetid" Value="edecb289-f2b7-435b-8689-72a7adf77d95" />
<Keyword Index="AssetId" Term="edecb289-f2b7-435b-8689-72a7adf77d95" />
<Keyword Index="AssetId" Term="edecb289-f2b7-435b-8689-72a7adf77d951033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="edecb289-f2b7-435b-8689-72a7adf77d95" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f8eb3df9-d112-45d8-89eb-669acb2bed52.xml" RLTitle="System Health Validators">
<Attr Name="assetid" Value="f8eb3df9-d112-45d8-89eb-669acb2bed52" />
<Keyword Index="AssetId" Term="f8eb3df9-d112-45d8-89eb-669acb2bed52" />
<Keyword Index="AssetId" Term="f8eb3df9-d112-45d8-89eb-669acb2bed521033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f8eb3df9-d112-45d8-89eb-669acb2bed52" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\fde67fdd-6549-4dad-b5f3-120edb1d80e2.xml" RLTitle="Enable and Disable the RD Gateway Enforcement Client">
<Attr Name="assetid" Value="fde67fdd-6549-4dad-b5f3-120edb1d80e2" />
<Keyword Index="AssetId" Term="fde67fdd-6549-4dad-b5f3-120edb1d80e2" />
<Keyword Index="AssetId" Term="fde67fdd-6549-4dad-b5f3-120edb1d80e21033" />
<Attr Name="appliesToProduct" Value="Windows 7" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="PreLaunchTest" Value="Longhorn" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="fde67fdd-6549-4dad-b5f3-120edb1d80e2" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\ff3dab67-7903-498b-bd22-88a09c732b45.xml" RLTitle="Connection Request Policies">
<Attr Name="assetid" Value="ff3dab67-7903-498b-bd22-88a09c732b45" />
<Keyword Index="AssetId" Term="ff3dab67-7903-498b-bd22-88a09c732b45" />
<Keyword Index="AssetId" Term="ff3dab67-7903-498b-bd22-88a09c732b451033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1727" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="ff3dab67-7903-498b-bd22-88a09c732b45" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
</VTopicSet><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpTOC>
<HelpTOC xmlns="http://schemas.microsoft.com/help/toc/2004/11" DTDVersion="1.0" Id="nap_TOC" FileVersion="" LangId="1033" ParentNodeIcon="Book" PluginStyle="Hierarchical">
<HelpTOCNode Url="mshelp://windows/?tocid=7d3e3d41-aa19-4430-be84-cecd72736956" Title="">
<HelpTOCNode Url="mshelp://windows/?id=d6a94a33-03cd-4306-a324-3ff9a996ff9a" Title="NAP Client Configuration">
<HelpTOCNode Url="mshelp://windows/?id=d95cfa9c-cc16-495a-b3a4-38258ca7f3a0" Title="NAP Overview">
<HelpTOCNode Url="mshelp://windows/?id=5df05e73-26a1-458a-802c-3a0573359b5e" Title="NAP Infrastructure">
<HelpTOCNode Url="mshelp://windows/?id=12410d32-1ef1-476a-a4db-3b4ad8824cc9" Title="NAP Health Policy Servers">
<HelpTOCNode Url="mshelp://windows/?id=ff3dab67-7903-498b-bd22-88a09c732b45" Title="Connection Request Policies" />
<HelpTOCNode Url="mshelp://windows/?id=0d11bde9-b56a-418b-8681-18f60c2fa56c" Title="Network Policies" />
<HelpTOCNode Url="mshelp://windows/?id=e6d4a126-73ed-43fe-978f-a09dd0033fda" Title="Health Policies" />
<HelpTOCNode Url="mshelp://windows/?id=f8eb3df9-d112-45d8-89eb-669acb2bed52" Title="System Health Validators">
<HelpTOCNode Url="mshelp://windows/?id=396c8b17-fdc0-43dc-8419-31311f8ac665" Title="System Health Validator Settings" />
<HelpTOCNode Url="mshelp://windows/?id=499cfc22-34ea-4f71-9c44-d7ffbb838e00" Title="System Health Validator Error Codes" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=06a1320e-fce7-4132-83ab-84557ccc111e" Title="RADIUS Clients and Servers" />
<HelpTOCNode Url="mshelp://windows/?id=349393fd-5213-4acd-af32-1b84a898f8b6" Title="Remediation Server Groups" />
</HelpTOCNode>
</HelpTOCNode>
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=55b4bdb3-0ca3-4e9a-b4e3-36a901a8e466" Title="NAP Client Configuration Overview" />
<HelpTOCNode Url="mshelp://windows/?id=c6ff457f-d39e-40aa-bb33-2a98cc6bb922" Title="NAP Client Configuration Checklist" />
<HelpTOCNode Url="mshelp://windows/?id=5cb8e189-8317-46e0-bb9e-46fed8fc5311" Title="Use NAP Client Configuration Files">
<HelpTOCNode Url="mshelp://windows/?id=b90925c6-42dc-41ed-8a3d-dda542ba62b3" Title="Export NAP Client Configuration Settings" />
<HelpTOCNode Url="mshelp://windows/?id=41703db7-1497-48a7-aa77-0bf2796675b2" Title="Import NAP Client Configuration Settings" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=14d4df85-548d-4118-b0fb-7c7b7e881e4e" Title="Configure NAP Enforcement Clients">
<HelpTOCNode Url="mshelp://windows/?id=d36703f0-2f47-4de5-a9a3-52fe013f01e2" Title="Enable and Disable the DHCP Enforcement Client" />
<HelpTOCNode Url="mshelp://windows/?id=10ff66bc-4217-45fc-b382-b6ddd09cc149" Title="Enable and Disable the IPsec Enforcement Client" />
<HelpTOCNode Url="mshelp://windows/?id=fde67fdd-6549-4dad-b5f3-120edb1d80e2" Title="Enable and Disable the RD Gateway Enforcement Client" />
<HelpTOCNode Url="mshelp://windows/?id=613c9b94-d747-49a6-a748-a9aa189b5c4f" Title="Enable and Disable the EAP Enforcement Client" />
<HelpTOCNode Url="mshelp://windows/?id=2460f157-0771-4c9e-a23b-78a488825506" Title="Enable and Disable the Remote Access Enforcement Client" />
<HelpTOCNode Url="mshelp://windows/?id=cd393e57-8754-4725-be42-81830e83ece3" Title="Enable and Disable the Wireless EAPOL Enforcement Client" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=50ee545d-ea62-4fce-867a-a2afe2a826cf" Title="Configure the NAP Client User Interface">
<HelpTOCNode Url="mshelp://windows/?id=3ac6ef9e-88c6-4656-b6bd-75aab87c4f41" Title="Specify Title Text for the NAP Client User Interface" />
<HelpTOCNode Url="mshelp://windows/?id=47d149f8-2e1a-48c7-b421-3033b90f8c43" Title="Specify Description Text for the NAP Client User Interface" />
<HelpTOCNode Url="mshelp://windows/?id=c964ab84-abc8-46d6-bc00-88729d2352fd" Title="Specify an Image for the NAP Client User Interface" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=e5d79e75-b909-44d7-ac46-49bc9dca7f52" Title="Configure Health Registration Settings">
<HelpTOCNode Url="mshelp://windows/?id=4b4ce8ad-5100-4418-bb6a-0f0f834b90b8" Title="Configure NAP Client Request Policy">
<HelpTOCNode Url="mshelp://windows/?id=0031a461-1827-4ac7-bfa4-f3350766811d" Title="Specify a Hash Algorithm" />
<HelpTOCNode Url="mshelp://windows/?id=dca429b7-8f8e-4658-befa-f2a212ff0f9d" Title="Specify a Cryptographic Service Provider" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=6fec9d41-3361-4ce6-9694-742805e82136" Title="Configure Trusted Server Groups for NAP Clients">
<HelpTOCNode Url="mshelp://windows/?id=baa45923-c5e1-4c3d-8c63-5ac0314c426b" Title="Create a Trusted Server Group" />
<HelpTOCNode Url="mshelp://windows/?id=8d4418c1-341a-415d-84cb-d05e965b267b" Title="Delete a Trusted Server Group" />
<HelpTOCNode Url="mshelp://windows/?id=3430da0c-ac6b-4be5-a8b7-711cd7b5b9ee" Title="Add an HRA Server to a Trusted Server Group" />
<HelpTOCNode Url="mshelp://windows/?id=43d81e16-de9f-472e-af03-1cf242f70351" Title="Remove an HRA Server from a Trusted Server Group" />
<HelpTOCNode Url="mshelp://windows/?id=8b4a25dd-4799-4f90-861e-5babc3f23315" Title="Change the Name of a Trusted Server Group" />
<HelpTOCNode Url="mshelp://windows/?id=d786ddc3-9d9b-43c4-9194-761d0aba18ed" Title="Change the Order of the HRA Servers in a Trusted Server Group" />
<HelpTOCNode Url="mshelp://windows/?id=edecb289-f2b7-435b-8689-72a7adf77d95" Title="Change the URL of an HRA Server in a Trusted Server Group" />
</HelpTOCNode>
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=6dbc1518-e442-4f0d-b873-f44a17fa2c0f" Title="Configure NAP Tracing">
<HelpTOCNode Url="mshelp://windows/?id=aa0eb9ca-83e3-4bd2-bdca-a24f255a208f" Title="Enable and Disable NAP Tracing" />
<HelpTOCNode Url="mshelp://windows/?id=a6f7a23f-4562-482c-9518-865b6f2c375e" Title="Specify Level of Detail in the NAP Tracing Log" />
</HelpTOCNode>
</HelpTOCNode>
</HelpTOCNode>
</HelpTOC><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="AssetId" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="BestBet" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="LinkTerm" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="SubjectTerm" /> y `!pV U ?w:p" (U*"QB)PEhA.S2hQSJiHI2 ,#;(@s3}{#]ڂ\t6sXWb̅UH)5hgPA-Ķ.
Dt؎=
*2Oι^D^^fkm;cWFkXy S~enևmakGp]_ \;ڐdžR܋q v \S<q{uoc->q7mk?kw,x^w]{Oθׯnnw7q7~ݵvLn"6m- |;<_ً=;ڎ} =ݺ?ظ䫍Q~Cظߪ6my.yznx=rk7~ &wwuknxAr8|+ڽSxd+i|RXm.yNj7Ư\o\[> ݺAl]xcCvl &c-oW](˹vOE~<p8;zp]Dz~ۺƹ ~zݛn߶vmC6;~ oE?z/tz/~uz} ?s_h_oQ^_> ? |xb1n;π?}9ٕϧ'˾{yl]rۧ?6j ~8ėXMlNqW zc}+-ś c WŇ<;kg~o ylC6x Sxvx \ۇt V;!i gmyȱtmIp.96 ɱƶyb 豽W3
6 =̵pS=
WՋ9G֓a)*RsiFO2t6Fm?)gN:,j;uV{Vu+_>zsoWsmPvyׯWe7wzp0'^;^ճS4c=cyk?w&b
ЯsKo]=\_z_#k5_ս>ѯߦµmu~jz_+{Kύfs^_~+^_W~;}_מ[[wk Iԟ.<K_=w__]
|n~5Wv~c'plaٮ6/| ꁇ:ѯ؇ ѧ>5mO>O}S+zLԧnӟ>&C}S:K}SzTS;~=Wc+_Z6}l=6gmuמ=k{W
p^{v˽g{mϞFM^:3umxgmľ{ڟ;/>kv락Zgkj
9_|չ&[벘ynf뿧}Y3|]솹~W먂/zmse]\|Y6} ?W_֫롉/a5ŗjuz{5F^W;W _ݫ5bu5e:첺z- _WOĔ/i]Wȕ/5evev]Ymv]vY]}Yߎv >vTڡl2 n;8wBw nÝwl n̝|!<ݺ;NJy{ >t=3c|'[} }0 釁 @}>xQG` 0<t## ńD[o߷ ŋJ:}83: S^q <oM7vpv.y9K]m
y'{RtP9˞):tTlN靫)ў)9ҝ)yٞ):[SYݞ):_S3=S:=:S3:tuJvO|OxzOμN靵)=S:g{Jt]N靽));tJ|t|Jt&§J6|t|JtFħJ vOΊ鼌OOΎN)ҝ#)K>S:>:SSJg|telOΌN)F;tiYS:g|Jtm:S;twJ N)>:sSs;tuN):S3;ty N)>:S>S:gwJN):S<txJ O)ҝS)>S:g}Jt^OέO O
)F<tΉYKJR:ygxJ~{mox^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx_K}7z CktG{44x{h0hHh4Z|>
/ h|4j7>
CG!4z|>
? ÐGh4 |>
Ka ޣѐ|4@?ah(?DGCaPhF?ѐD~4
GCph2>
]/ ah~4
GCah|4i>
CGp~4
GCaм|4X?a~4
9 CGh4~
=GC4~
ðGh~4
C CGa4 }>
I CGht?@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@xk\{80 0` `0 0` `0 0` `0 0` `0 0` `0 0` `0 0` `0 0` V;Q ?9..s[[w}w{{m=Nڛy#G8oZߝ/;i%rmv(7A)vpN9OM)~xvp=s;lvٶq1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Lj.$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$%*111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111Q!Ȑ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 v neC] [p:.\1 ¸p.\
p\. ¸p.\ Dž W
p\. ¸p.\
p\. g
p\lp.\
~L ¥p\`8sopՖu W
p\. q/}pU{j ¸p.\
p\. ¸p.\ lx".\9ԎX;wg7G n|q 1wG t|wsyB ;c&}} (}?>xԇ P} >X}pnn9?=n :cS.\*WqM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM4w :~ګjjګjjګjjګjjګjjګjjګjjګjjګjjګjjګjjګjjګjjګjjAii;iiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiumV[[mVmV[[mVmV[[mVն6jګjjګjjګjjګjjګjjګjjګjjګjjګjjګjjګjjګjq (?44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM4=MqK\{L {%İW~vt;VL~,u;Wl64MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MOaj4MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM=^
5iiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiۦiiiiiiiiiiiiiiiiiiiiiiiiiiiii4M44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM46MiҚiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii!>iiw> ]yg]1/Co<;y[M_IZy5|5{0[?ev߿<k;[A\>;־?.wwvU7Oo ߂w}[W5^2nҝ{wE 'B l ~:͘h¬1ti=[68e05d7˝*;λgQ}`&d{o^?y$n&ȐT8XHT.7*u l f vC`upܬ5{5*-&[jj7M1ZkiYB h$ QՑAq_8
L/BV6ˁAHɁ= ' @ XǢH(}}g\wHWJ?R݅
@'FU[uAq bä3|9ء<=X?UruVgU .9wCCU '֟XyIH9=MHN ̋Ybit%2} HUQFMnOJ~mhN!F qe>1
mWh= tuPO_f4I^{fW I#.~Kaֵ] \cJgvqjGh)O챳WwfF_\ \xౠgU˘[ģnG5/e ~:ga",w_(vɃp rz#z/ t(2u2ڎ=\.v\{|DiU.hB!FDUy^je\ (AK -b3ȏ4Q%qb1!\tǩUP=lܑtSlvo$_v.e..BO5S[E!ΠOp+6u:gP`[dYg [ 9@+k2𬇨;r U視mD;Qc}hP3O% {mwjCu{ŤqpЩԈ*jP)RIuwA=r gl`kbK>"ᒬH|8۰'!撖zZ 0.5O}XbW(u 73eY/XlojlcDG֕%;}Tᖾ)=GIQGװQ!s}Y@++FOz*&lv /_KY]f{^} Qzrd;L{AiC!5g\]Yw_61MA8ք;=o^+F̐Y5XKeL}vͿ|y
É4Bax)
\.z>Yr3൮\u-{ӵJr{#ލouܘ3jm,hKT y>xa\jQ]y ;#,"*nn{tTIS]W$~nk5 G(B<sfUHeeWͤ`Юpߥ+>
>J=V%[K>&T9)~ҕ+GSN8 R^,]LK2ŘCfjXZ֥J6
7^ IQL.0
Q_ƨGe9 `)O@_.tMKQPuwcR0E9ھغOma+4 t3m.UWJ+@E vfwtBS[R]&:\a32 !ږ0/j>#kgHgi<gL9F':ޝf
Pݽ H5 UTªA4/O |oFUkV1-VFtWl4 jNHz H"OnaGkE)cB#Atd̈́WBQlLZ 'R6nm%+Scj/?3
+ T9rQsZE]Իx *rDea̍MhSc58+Hhd+lFH\`S2 ݂)<IouIi1HK7=&՜HBJdyĒgL djP Nl]
2rg3Ȍfl9V9-zlDKYH p&4r1X|Bo;Έl )5a&; qSngjhk*i]"{6=<Ϧ P* Vc_'R-7<3> ˤC#S`"[QW AΖ:-(+>rms] S5hP.X5` P|j ^ h.{x^.MGGF5ikK\M,vRDWk>fNGiR~ `ҥeySs1pUb|,# rTq,B5Ѷjq{5 qѽ(C.n,E:orWOq
k]l LSYs}1Ctxnu Ԫ.E[06?-ӑ ݣ%&#v>v!j Vj84lBpNt
lmzjm EDD*|=QQ;xeoZWm GߦhP[ *ſO~ f.15.y1c8jP
r)#ȍϐ:M/;?+$uG#f_PJVp\A e,s< }3s^E [Ts*g ۿ99-ܷWG+hcj]vt_aEafE@pR}AT]H:÷ ,({AB fnw/wDV0u/b#yގ}/Nqcwլȋ`x=k>&Ɍ" ɘƵb
x)MN/&4ze_=Ѝ"ckݦs[9]6lЄA d P+0Ic#wJ }r'PӉU:mmX\ց;3o yػ z&˵QKWd2lYkm^2pg\bk{"ph*n5 kF0 JQCgYgTOh=l+OH[q FV-mryXA+xm!dt1jCjjdoR4* ^Sܪ)#,oɈ2᭕˳1s3(U',sUѭ&y
i\[\}By=/,&ó)݀h0>Sq_ 0*"Y Y˳SD, @s 6/t9iɱYkAAш
XY+GZ:e͆ 7$3nJXX+yuhq1 )_ rn<h;ք_;Ǣ=ݣ~<k..r
=4 dSO~+SjX5k-ǵycf()TƞvxE!`x:C~;1ޅJU$--}λ},]ZڣE
WІr5"9-f5t ij/d
l.kFVh~̃|< ]
Ι H' m/@]h@$0D+C}NI!? pN XV̾tT w:[[ذOt iъ1}0Ol:O(yI./z868*Ri
Il^ʼ *F<CsϧӒeEI\އfg}:2R
qjv;OI_%v{w?e|:H))ՈiSbۿHZ ݉ln0 Nvcm{wnh~ $iD՛FIΒ:^$JF"95m ršǀ4R|wfuR+e_8 3xm$ʶm1j W3x't*9(k{
pGw2b@P3 r 6Xq~5e3D͋ڒ NG74 XqI0ų^u)k;1~+vn>MhZDC< 'R0S S#-p|mq)
+=id
w}@ròCD(,Zm6wlLK乱}OoΉ ߿J #Kv,0N s;1- uᲝڦlhLlU؍Hf=_dQkT>l$T1M&Lx pT۰zLS_[OAgp |Vs#
T;]5%]J ="2tnTQI'v:+",f
Swd C覝G s%Xhgd?ݛXmWisWf g
%ֵ 3l k'}<.lDF3bfp3'-Riﻝf5
&c3ZFsk☇ZB!k3A!'gT =wr69F0?1eON8;sӃOtZ2yBY"f aMkp _~4h uB(_dҿíq`♄{
B$m e*o ,a0׃gʜ>v4|$pxRL.~8p*P3yt6[vgB4Dm\tRm
?% n{< OKrHcF'ϗ<\<;Νv+ osˏ7(aekyH{~M 81B&ѴGH( y cN.-Nm^qwٝ ib_:Hԏxڻ<'P`$~H;
ۗ/NԿ gE3⻩v#_>lEgG_f,MW"xiП&v PVNR̓ *h>'q}̾ |6ٴO[iSe7$HE"݅7h=x~ֺ/v-^y? CJPT;"ɑ!-'M&v U 쥞 {,bX&nQCT:MA=(hJU
i ռ=>T͈En'X>z½Ke4Lb7H6k=@ԉN;M.J]h017+ )QʒLkͶ6ӨU06?'Y
ezER~U\e1>]kFSa;t9\9t0^ŕ4@+x6wEJ{\M+XR*si`h$M0ȵp{]>&gy\q ؿ/ۻi!?5 ăY>_e𰯰<^9gi$ Xm ˧5j~F#Eݵ-`'(t
d}R& -рrڄTFm5ҹEC5=SqZe)ӬwRAg a#s*U"F F
mlC3 k8IJI1*!F# =mF&Bd FN-C
ˡbH $1s3d& w"Mr,`5wg՟6"XԖI% a0w4^|)Yʔov;eҫΰ5jU ~#2dfٺm^ዄqzشNro0ݲc -ǦBA4ɗNu8]QOrU $OZs6)hmzu${?$#WZ ;KO~#Of+J/ a Uˎ!3&`
W)h'aک i0 30#UK.r;bN!mJOaI)Z-# א7tI!]D vQ jd@'øaѸ0 7) @]f
xe89j!ol@wo?FvH#d$2HF$#dF2H#d$2HF$#d/ TLzP}Aa4/* Q} CWBhǒU"l_%i
nw r
74 G4/6* /,(Wv.H-VvZPC[ܷyw rU>{=L4.6 e]&P覩b;Q܃Fibu 5ڈR)"=t.9g.]A4}^k<ҥrDtcH =tMxc=>UwA B0B[1lڡYxp<XobJ;YC u\v~l `i{ 17ޥcS=!ذx?t$] =Fn䛟z-W$&i &` >9Z`̡ćk3S Z( Svܬmqo`s1o~ڔC ˊ:W kt*?~ճ0{md"ޚ(k~U;!Hf\MJ< wNc2qxG]ۥ> v:wJb
aťW.Q~ e dӨXoYOQ'n
<ZD VڮV KsZƌA5F
W:Wj)"!F I`#ST\ [MuB(pI*$SX͜e `KjY֎ ylZ :,[ZzwQQ
D3W4&Wt 7{BdLJ|Y^Jjsb`U&hx sSs%#\i |8aw}YQȳHr k\t+C*Y*F.=k^M
?xiG.uxaiBQh˗s
;ZbἙ ¶x*u6>$;fg:7Ƶ/0@[ǯ}{*ų' P2yynO׆@"a Vb7 }:5K@){/qo^e f;A ~30缙C(/=YSz~ Z < UTm ЛܴU$SNJvE(Z|!`^ڙPYa72gUR"rU|:5Y愎1:e3Vz =
v!&ZYvf #чe k5'
VlyLn\.Ƌeڬ+Wx kZ8|$ˤ6b"V<'1 +$ ~ /L,7<ME2l\ G ˴F"'ա S)c˞jNcwkaWؒ<vKED;#VAtoҕaKg2 0=@q
."Gk3Yn8{
|g([zTj,{~BW7iupՕ
QF:tdIL:t -L>Cd'nؕ Ced- IR!YpRll{h P} |' *47[ bh0v]1yqg'.#)nK'*k ǃŋ< O7vJxL>s^iׯ"P0 ʃк1XW'VKѶY(ZQe ]rƎ?N'H:胰Aͳ xsZdτ>F| y?I,} /K֚<+Óg+!it_rvLv%zs?o|j +>Oh; 2X!djRYrun-'x|lOa &UʝF
tpBu"whUcR* 8;xA#_Exy'g3H mz If&t
oZ-'rCȉVsZu|5>4\ 0yfmj37;NTAC՟X9 dCI6 g &҂z
ex7v
?§8yΧN$/6[Wm̒FW0YBE44.r,#Kizk7_3 =WE"@G'|y'sadﯿ<Հ
ٖA:ɅN qtW^j0a @'m쬰n6,Af
ŏ_0
OTgqrMPGexg:Cvڰ`| +d͓}m#ԕOP&
N r/_Fg$ }P![O` !#\,l%m}1
Cbkx;ְ& ;8җ+zGrYO" !--sK0SՈg4$<Rs9{n ƚw )
J||VN 1|Ȏzp,HL)Hܕ. V⏭7`//, P a>E= ˨Ly* XhJZ. Zr3͐kR rq2;B-$GM-$mVXN 8pZrf}wu >&?-CȺm3 ܲ{dž,?J%R+Ee|U WM [eWL
Łzª"
<AmR>&J$uPđsUIȽ8uWn+Ur v>o&¥t.Tkk4Z5M%K ^\+9z4Mk_
VCxn )\<{+a4% %yN h_+_ѶlOvSl }Im<v\b\ .Hܹr cQ7ur[3v^K @yB]0Zbye0jLAD3ժ 7W H]]$wX=R\m"7>g 0L4 /t +cUNTC 6>JI9e9
.l _ ʧRrF;g5? 7akrn̕߀Twa%, 5%ĬG^^0F
_
O+dR-}
kx߮8QNm쮣J@l{F]v(dSld#!U`.- nH9{t~$*(_*"&pq\Gc
7ݑD픅Q ]t q bZ;[_0(p SX
N˳wt*־n $ݻٍRCh^(;gVY) 9>%nNƴ!tyL]=MiNUǍ"R݈y_^Z< W8PL<, ƤjT9[7nKknP X ʼ:1T9%jnXN$S1(4@塦O7ѫ(hm~9 <XP` +Ɲd9̳^-kfãZ*=߭(cΜFը}v".4QOkI[H~-iht
VvHcZPJJws t@x̽Rhʖ@qD}4 /X^"89 Z䣚(d*nZ%id *'D7#MɏU uMz jW-l Ei{k\8~
WgIzs MI|@5GRmDC>ڻ.XV i, ]~acTs :s9=fꗲR1E3,Iy࠷@4#
OͰf#GhNeu&IiԷ9B>N8#?jDM)%ʛܡ||"E,kwVO={ēِuX6sY q r_/Pl} at ٝo 7/Vt1tm1p$&V$W`2k 쨢9: hc e8vn 1p'xv#=4
щA(Yi]y ;+2LZGG!,tK犀%3 =ZX.tj+!@
Ev\9^n=ⰰ谮kU:i
rbl~#&xwkD r{*6HE_YyK2bE|0
ǿl]aQQ{KO쏁.&FJR v\&d|hSΚ
7|J;n08M }cզbu,N!Msط=<㪎Gd]g <$ % .+,刘zʘr '7\x <ʙ1B ;*vv啠JUXnt i;j &f`Es
kŚ eɅg#(7fҀm|< :U!2hĠR5\ޛ8 &ǤF nם渤f/|Utk"ȵ2+?LYq+g=DoO ~e~eJ1N ʏglza
i{YA}+ _Z3R' ާa[{ ii2PjU鏳Hpa9'hd*} ZYW$+E̔&f{0dPLY $C; V p
L%< P& $\2|>kA
9*Ӿ
?a
z&!1WZ" [9`
i>ȅ < UB y͢3m#!5b1eaRMe$#n
:E x4suCG2pLdƹhC+)yo_G;!A2I_
KR\1p,!}3oQS*l$ƥ}%aF3 .9 *d LZ熐]l
*cH . ΄0A-bĈ7dYf7Ŝ[tVm*zdù&" ĉBW-I:jL_s-9:Q;c5-?BФ>1P&miq;3*%K%+ t"-* !F?~xr+fشu <=N@"eP0m *,SSm)Yo >3"p
t5͇Ȱ0'x.03:ZQӵARhi4aA
nVj X\b pz 53.D'ЉRmUzI3`16h*m b
ЂJ {<y-Wn/,@)kwX!ZvurIv^z"6H 梄ÕJL 9^^pjUDGWgj-uL=# "*C#x?"?n z6X &؍Չ)Si}~
R1sZH@?uX lsu
D%K-k5EQ<
bu~3{|L隩\FrŎ&H])E3BQVXӺyW`4m> IZ}chf'iH e)39;YE 'J_cȈ?fPК㳮
{P#)B C` a(l7g ITlLJտ}~NM+"1Ci=^[c+] ܫ&WjխVΕ-M2pe7-w
(@D3ntE^;/TNH厊=N&1 ',$`cl98}.w!P?<gDWP|r Mv_bĄχ0P]@&dcʫYXDI߮7IH؆y:ȶl`ʻ*J:VYnp㯅FnD<Wn+Թ] sY0w..$$ l8NY1Z)l?i. '_X@"g[o a&1v}.'
}:g ڿj90KvD֔Cfn],VEsgV̿/R 3qw'1I\-RqE+o6 Sb)}ն f[rw)MBk&xW!p-Ӡ UEsR 7f ^ ꭐ6@: .<AHbt ЋË-ZenCsRo±p%bp}Ak ۭ!I4. V-i]; #T>Hհ}sk.^ "FReoܹ~-[՛1ű^hsi]E %.6e _B#<|P- %??_ 0pՐ]$_.1.^aM1߈v\ cJfR۵ñ # quP#,Uh6G
-.ϧ cKHD[ ա&!9 FGɔIF: r\ |HSNМXiM` D:$ssc9JF¸72ʀv6Ց7SQbztaQGl=UcLK *a2n@)9^3"~d'b8cEZVaxنse>&}rl OK=$}8M浇ʔS%ɗOPd<7 FXnd_*д %xo(%\.zb1?:Y.
WjD D.93&N0ݽ - C꜕FC5FmY5luմ Þ%#95ŇкEɨ<6n'[챓vn>R|yqJi.^f𘧾LFH ̤RsFS(j"#u11}E[/_# :P6x=%%ߜ4II,βN)b^@W *JQ_Rzgb6 f=8&qV6S9Æ}@W xp,ݔv)WB>¨ܺb/&n^$PyYAx_ 6.W<oCc8<95\dB ; åZ]K?> hsRR V Tl #h=j{<ict%kZ痝<'9&3VgH_\dsHvQ<tlW S]*dϧX5$/ !9,{Nr<"Y95&&x1S+C
6^~=(]9v!oυ|ѥZ0ɔ붲7b> ل3WZy1U4dV{'88@Bdˡ|{lLCn>N)~GJQsb=//,*MHjzs~٧tO}'g'h[ f{0\=
їU [Uh 70}VY G=L1Nz!g)%%;>NU:[9LBҋ{+|_
R|vRObC.סK[Uh W-Pxn[[+teB,44`fq\82_/2o0KO KLU~3 ͯ3*8@ 7 k
pfUf"V1'%rb $o*Ú2`"l5v9gm}
~_qØMշ
炔B=!a̘I]˩@l ˋrJ2iE\zR=]êU^|W됄:(E̐**
CamVG6ZbCG4 7".E ɁkЈGe
t V\o$id[2(3K n^olǞBCQ#L]}OWS Qj(4j}k|'Q7CIQZrd P%VmiזtK}P5h WsxwRIiӤUFۑpZ\L ;uLUgktp<7<n^\quh1(Ӣ^MhܷS+Yuʔ84 }<@,GG+QX
Lrq,i~<7 =>Y
;R zN,lA |MMt qgfMmΙZNPd"a*Q%VmmHu:Ҟ~}]izr4qēY^L&M ґ %xZ24Եmr]&7gԖ/U zz>v<E\}'!V&_ͨ/ʓ`l)xBn
Wݴw&MBՠ|Z&xQJ ^JIZ[䍗XgJ[٩x.~.҂?(ɳ <Mѽfե\07z%,ͥVt<~ ˌ|A$ L\h ghԋ-/ʆf](۽3^6
SiչJܪVg5˵^ڿ]&2/~HJ lqa=
%;.? i4iV|^0(:&T]'~ A?<oAL Դ3h(\~\=! [>U3-^'U 1@õc2ִ=)&|ƸX ]F!$ <F`_.VրRD3izLE\"5r'1b ePxX,h& wol87; AFa jy+ ^ %t:aGz:^ W[eT .lJGhP'MI<#DPa^7l]" t h/]snRQsŹ(I{~73]`*6 1Eh*}1J 97ߍ ,S3CMȷàmm+M[ _#ʬ4lkZ WS3b4BbsnܭZ-6e"t*GOSGM2|ncŸkEiϢWGXfH?NTԹ
Ƒ%YuzR X Zv{L/8lHZ [N q
o0!| BTXA?ydSC [yI"%0{.= t}#J 2
;x^ U=YuTȦX,0CԀ~i&4*c!`v5\yz Mbפ+ErakK܅ O"?X 095~y '5Tv.[5Qu|uL
< wYutv *+f #(4\ 4JXYk(}^
9ހ&8 4 ;4O[11A Ս J=o=g{Hqf]ZVRls!rj;@tgqk4Qfqx8uSSkơĢKY̓
3.6BE]7{f@?',X (C>\GzcU5T N
C.;+12ЖkQ|?lM_,.Vj//4 (-D^iX[+Z[NT[ tl;pF=7W/kDU w ]S 0/-+?[M] iUaQ7>0G4rh$ ƿQ]$+G,7us&D "噈9B_=pރb]Dn.>`&z2%úNԟ-e@`':eOm uOQQ@6)Q^؋L6mv by. l$Q;.aG#P( G=6ye馧:Ey_vS!qy5xB!zky鉸plQpśɋم c y}lY&,:+#
]Grd|<-H FuC- 0Ca H 0 8,P prV7o*9N
"Brꕰ
vX 'r &x~ .蕊<Oz`j'puϋ_Ml` a~Z*㱋+E"-$T좾SvzF87&Z
+=BfdH)=q,SͶ˹D? "ew.j<'rȾDV⺩&= s\ {*$QƤcHdrlCi3պmSAq]I~wDa()N\oNҵҰ w{F>>%없͝{aUrT
[kk;eLh l4hvE*2# mx=
m&w$^ԓ-R xֱU5;?<g}EGxogi C\
}ub uj2R>>ca?B \K@zhX NAȒhY ] f'n%zj$ z$DSXx,Ƿ 6X=Kg .V{?[R7s>X+{_{p+siʝ\jTr6ؕ
DS1>=\,:'UOـ/+H>뎿RSQ9t֡3CKqU-xʿf^ p,`Mꦙ4+<[0K_!#A
|_Uٚ #|k ,Pζ%~NJ>bC߬m,K6maJnkqOP%IFWjqm.6/'ixV JĬ ~+ɏgEQjKV\&I l-9yMktߝR<5i! %BIC$Qf2^H׆Nc9iv*dIq^ g͆։+ū<)nk*<"Nl+aRX_P_v4? YvePˁv.y% 0D;EKR Zg
tm>茫UX;$'T
GqoYa̫JexVwBf.B3n[. W}8LCX18ɟ9qNDL+Av O<{~ |Fd8{&5v;}<-X*%'phR?'c.&]N/?OO~46` k#8'*)HSaU͘^v B( SQh Ga957`?D a%r$<P+^T*.Hg,_aA3<m/
dOyh!뤧&p
O~oSemMO!g}<'U B#aQSat8z)۞/au'Z̐/veǗ RvS 8*EIy%0@˹2"5 "[c/+g2$v TgZc Meiႜy3* IUP_Wpޣ<Zp'U!L4d7Ģ(Jm_7ez9IwTzZk^yku^Hܤ9yv ixn14o-՛T{5b Rt
Wߛ'kɼ_̽AΗx`_Am><E'==V= sшKX Yv=ج
.y_U63 R{W.Ll(Q " ~<&^T^֞P"yPWs⡄*%N'O>3h4<Q$i )q)aДe,ܕ3WOr~\U_גIαk*+Ѡ eak0[?!7%_hTU 0H{_&4T02>@s8a6og&T &8ev3\0 )Ky&drgQGƃg狅z5GfJ]v OFL'nX0<
6Jn5d I|w Xf:0ZBr\Gӥ<*',"V6fL6H3^j1ke!!I{" 1E?@ޫx,T V{81앉ݘ,_~ S6r$nU٨! *0D.8^(K9jE-2"cF?t4i/ 6m5=&iO]t9;W% 0w vঢ়sa2d30k*LPpFb@
MAmt|ugJD@Ugb9|,z
-Íc/ʙ(td0d?h
YCEP9@G>ҍRY.Ĕc: Umܴj2kOFd: gZYH/z_˛䪢~fg3YWSd^gD̀V8yЏ|3ڃ,RRy,֝ptèߌCPT=q [b\YvsD+̽gH$$TN( N # o ZHpЉ'W_#«RJGƕFe=PjE4Mi*Ж̍ r̺Ӆii\O fk8چnqF0L^w_gϸeq
hB5pA&&Ym?, Q͡dec\ZirKoJ_תh Q{vz]zV0P}( @# Åز'X
DbH Y xE."wYz B9냋L /7*b慏 ĞJ
k }b{J;O1y@ 8I)<cN;Bv,6>Ħ Y,3fy)Nb-mʼn0Cʟ(?s.⹎::ޅTO|. t]M]PD^]YX -r)n ^`mģm>; ?;Q|10*
cA҉hbYʴ)5JknhQe{@\4z? ō(72٢ .F E/ߣ}邲/H|1X!]Pp'pN^;ORbIY tGY2 ݝ9Z OOzjVڭ:g(2Jcח#
/|];~ Gyqktۖ≠U;̉KYoih! !xW
_EL ㄫAA? Ӝ6{
Qe~Uwtjai}JɧJg/| -mib)\itɂi]]?y"]{F+"I%X/[U+eB41y 9
Ձj]&tD&ȉH^WCx"G>%vɇ?2TM#rX*5vdb_ ﾴ= W$I@FۣsB2Ao$ӌX
S -i DwHU ?3VZ
CN+Z<
PI9AgD[fB\}駹['
*-"2usDXeZ}m<7qj@V
Nx҄R4<+kPU=5éSРIU֣[ %k_,j=yT|BaO ht\X ĵvA _&Tܤ6S BzT6QBH"iX8S[!ۙ$Q1.>uSzVOp`5;'TG)@_tZpr *gOs7Tcm/mAuIzTƃ؟#,)X|e&'إE.֫pg2GA rX-X<AXM}]'_ d U/(.뇏+[4k+T/Fh|x˾k)k [W#1O>lԵ821gBB[i<G mJRgv
բ )ㄣg 2cRk!B.獐u!ɟ*r'\jbH6QU8,q;;Ir'rnKהBeF s;_5Mxf>/n- }K.4(D|qM9p xsi]_G |r}!nmLr)qDj n0#qB~¿Y>Ȯy~9~h .B[Zt쟿͑^hC &cafۚ"o6&u<9AQT"b?-`c $Yv_Mt~(&&OA$"aIʁp]Du[C~W=s:!}v %>RNb/s5>! AUBy<N2V%s095ن %-]1.)0-Q|s7%v@Z
>ءȤ(͆6q%f5US.w@ xz.N]Ϯ@*c/^Q0X|T`x tѝ*{ E)"n# {i:w6p#VgPN
;5+=~ѵ( Lq琴7 B6o$*L ?^ n9N'Л
{k>2'&AA.I{[COp?aF`?a/"?, nYNa 6͛&QdDĢ2Tq[!a!A@lxytud6$/@%p o 9 ?
džCB߇ JӂӁo$nsxRʴ ^<{ך'9s'Z ʿQ7
A)]46He=qDz&
e]+ 0 N#j(T_D(fY+l XC o ?sJrNpRX4aTuO#M<Z 63۔,SB*엱PKCc%6鱫=#:oeG60D.q
ۺg¹ī"ܜmSk&^'S EpT
զ ~#{:t F/Pʨʙ,yٺ Z /\"' paaR>%s"Yt|Xݥf@~KG(\Iȋ.B1!0ׯ@ pc,SL1! uvQk3oƫά\#z/y; i fIC`GK~.BK^t`4~f0;RsD@:Iu \!ij6S4JE{adoWu"ι
X8c vwl ~IY^x3a= 7 \WC;<oFzV&ͺc7\c[
>/;\F:CY *} .9 MB_aנ)Sxˠe2ݓH= S^ |O;. I{A։^S)zS m֝g mar8z%H(m~!뷵 / 6U8跶 uLjg]3\H
,q9H)v٣l~P z)I|J:$_M
H$l͜6tH(r c8 A[5kuP|ëaZ'V Fu9PA^l ){>mOq FRrVTW(-CAZHs ?K~-LjvgkX.yƟ4 UIlNڛ6J{
I<H0 bZC3LLG)˟C;XR@ XmΉ vaPHmt ҫ0KJL)6 $%py~'+rQ*`5$ũ&X"9ShQR ~FEo2,ئ\ƌd ſ,Mz@{c} .rP/s
wȄ 8cp/)މ9uw5hU VI3";qs%6bTO]$JaW_7z=B[duk9M+ hΨ
*ʜ a]+AB)>+u%鄟?8[ ! x r_3<$cqY53$Dz $Ns$KGuyB "
XTwF,c];-bzl1TH"kmظVqyb" }Ԇhf'f"Fc;mM+ <-h-'9=ZIPfK~OF78O_Z@@xU=l#d$2HF$#dF2H#d$kx\A؉`@?5_93ZCX }
Tzy r86UTg/>Sq;״zc4h˫l[f8yl OƁ.ԒVYY_ȫϚْ&rBjZhSt?M
1Õb3qZB u =<4]WBB,c\F &8Qcl Hב\%;ؾ8AXW# RJP%U%4J28N#K*(dm2\Dr:SʲVm 8詺D6htZ'Yl6_O'u^] m4T^e[/L^m=V=r$(r|1 @"RiQIڬ^Icg5> M@\r MgU<j`c Xm ˧G Qܠ\=*| *=!7e3^CCq6j<3E:uipW/q=V|uE.j8tcR xJg8C~Pg-xAR4riҥS,x2:+/#dgC S%roџ2/ sv7,9JHIjTDڳOԈ;NOM*Z9Fff?#!#VXX6Sݩh<]e1_>WbnmK)FT.[E^./u^K2^pEDc͆l t+T
dR \qd`<̐ذ ' *BOnd5E&ν3Ή' H-tO%b QZ*#{*M\CtFe /W \k T6[1̊
\8[[9 z>JE3_Qy@Bq$"yѠ6>z }p Y*ev^0fg{T4k:Yja
<V;/})Xk׃Cױiq3:Պ~
zQ;Ƣ6sT%%ҠaD'RMr&cd(5pT̈u/8%JTQgU1!uҺT nF8nPW9T]g;:)>lkN NoF /n>!q J UFZނ
ռKp\^9M.BmErZTpfgdұ PD
.RE D]? J>LBN$v cCN0\ǂITt#4JEMG>Ap
Q BhЫ-̵H m9m
@z
J(IHuc;Ajof Z/6\5)XAlHGQ.V6EtWk0-~xeʴ~2%@t!V,Ohd =mt##viX,}f-qbߍ]#Kcid\ ~E, ]huL>Zj&#u'Ai96Ø
aQ}mi(4|<偕E5i!}ѡZ7@K^C l60)4qblM$g@R)ţ 44FD/[.64; L<D?l{dݻ{>66i ߎfh@a7GK4+#0gnv:li25Ջ$
,ܝ<tPFUMλ:QM"bvW3F7BlyosB$cF奃4.HUS$ru!&y[EitC\^"6&L\z6E/$pɅ ?Q/iV8@WbF$h'D36# Yc=edmy#Ba2Li*6V
M7dd~%S Ǧ2ӗ:9gLAwJ icUTWFTܡX8%SטzŒ{QuM[Mg1aNcVhTW:zdE3EgN=a_k+}b$^ꚃ!e n9F!.H(R":
0M R<!f7c7Qje̚Б"TԐʓ!օHUGkL) nq6) )U3o!"VDEG/F![u
. ~ pW:Q%Qs3n\ooi!/\ɴb Ub 8qB?2_[X m=
RD_usWe|L0.: >(Q \ Oz}m"5FѴu[ h C7 D!~cpgjFfcgᣊȭ.Z+qY!ox0 C`=,8Yo/>bQ _r7O}m[1:F!scu:C!7,_
=R -Փ1's\>
8WY shiL@mO%/g\|}S~z9ukO7z/WսE'^:-@wRó2=#5̽Ps',> ~+#$Sϥ' {OTc&|>#K^O "vuPпV{Xuu~L_v7j/o#գF2&7N2H}I s~8?5n'u]gOU ֘f$gA jUfaO|pWwETJ:bPEt{mњCt_ࠖO@|01 ?){? m L} :YB-ȯ|H'ͩ
l+#wV
?SU2ۭ f ! fp Aw5B`b]v*clD}{KqiVn9uBtxdzvBH}jl!67Sۂ _}"kO k,=i^. ퟪV>A?r26w S-WA gn' *l>9 ޭ{5{4X>x7a$Vj)>=E
tfszOf[X|mhu[i}Cv߇햶 iƞn;n;WgnO<15~Kn/x| ˉm 7[ߟR y8^0j=}}t bh"#xQy4;Ug{Xfw|\8֢ly6Kz#>GOw<FCûྷz6j|Oy ω&D{;b{pY
z[@vO{JYhv#v}fΆmq{R_[r/Xi &->{f =_es If5Ĺt !2#A=;H?Gʗ` BGMFL;~>?r\B5k sݎD4T{ ͗YZV?i?e?ܶ&"ϼZG7-A{Dלnm}
I$r? K}g<XZr5BI9|
\<hs Ψi:ivsb]B nkS~2w[ m#'~"9 [ e,{Oo+M49?u;cEYav U^CUYGs
T=f$Gw*|oܯ
?/ymMNeGdțc<(6<j >?r9ۻϧwӌrO1Mo bzD{7d- G5*:2[Y l-d97W٪ehfx>W-ǖ gxhMFe`|/cń̶~N}a{K{]mc{0?-ʮ_orc ߽]Oyշl2
WwK*y [2x_AxM^G`{zB3GlBY[&'#[~w뤘6k/0F2Mz7f~:1-d evum=h-ʰ>A,7
N: %Ĵy~nǰmn@G|+/}-l{E}ܽ}*II 'Y?Sg3>{,7;X }`Hn"䖦2\w%O{'` 1_Q2gn b aE ܶFxUUfnVi: b9nr 748d4Q`L+Du"P/%qLhEuHމNAO #.?,w^K)%^{;v5sANvTm[
6zV/)]&OX
Q)W)z2%iђaaOd~KGӜyV;ϫ/Ju^Hf[ouجv %8@),}(9ѷXnH LDU, tw5 kҷUZI~ܯ:yO4<mpKueHc? tUw)S.
ʹkJ{ oD#:]ڭ~{]sp6!;ыT ݫZ; ^;M]?sڔ/j^1~+h6<Iv[3.P,@ d1BW`Ԁ!Y A}-nFZf>Mqho9ڦ!_7Edߞ~h.>ѩ<]KtUrcHD}թUcY|HҪ
jE}_dfJKJ@6ן+| 5" C8JC>G"hW16P{K >ReHZ*T Dʳd3lQ Te zA-e%m U:W1EuרR)qTOgT|2]T UZJ8@$+e.*THot +1RӽP
Tu\2i}P}DT^ڌ2av2W1&dO5U+? wQ%O}}F[:Pߎ} Rϝ2罽YjTOw У
ohVSg^#j{ CBhҐJu{E
i5 5ߧ+մ9xYz-s j}sɜ.ԕs"` Y<Av$2 9; ;AO^2D/߈MlIQvc ?4gE)7蹴Ɗ\-[.r0ynF2d3ʍv<aSO)Ȍ뼹\e/c<sls:VsѾ +}f f qK3y>`D =&U=zi ='9;ǣKzx\G39? ;?Ƚsxq^wsܾl^o/Y>;Ź vB5^e<O=\\؛dB0PD}E Й j
X>IK{a=K SKޭDңcϝz< ߋ{PN9Z v^?ƾs8;q|yw/ @o{pX4SQri
wߩ9 { uU T3 5" ` o(*'h /Cw92T ${ov.?6-
)), iBd !!: PNp 0 {,kw#ʺŒ$Q$0نV, 1xjlw_I -؝,nvΒ '2`$?v%"4 03^{y+rZ!\5-fgle)Ksd{R~ ,1= ED<h#n\Z
C>{#-1>u:
7
#uL!@`PTlr4 H{ nHFdCEF bw<7)ԪxX }8}ʖ#ׇ^S#Lj |9! =̲()* ͠ɫC/D7CrBQ m眧2 " ʒL3ܫtT(,"q%^WI!v,Xqtg
ڶ2;9})B:f 2:1q_-V/Cgr2*tnMam<jCˌ:[աy7KsevcG~xai1?`+C/z4:?و78
=p&+/Cem")z X2s8 x
$;qq%xLzLha^3viш3SCJUըM8{xa ȎL*jqj'$jܺ* 3_EɀeRңoW^Q2;Xb,Vidž ?"i
KЙi|/XwEyx6iNi2)Lrӂ;<&w.@J)#+-9]~.K0Z{ݫ/Cdr+ L j@cyK,uy%<uz) `ecJofN,18F&
I^ z7d.Dg.ř4e`ƭ9?:M>6XfL-z\\?<4 k5廜<^w6Z
Dִc 7GIHdC'B?N1r!S<i!Vq$l3\=x
0kP <NcncW텍%i$au I^ z&O>;a
\n̍p|6
y'jV}i;R:IO
Aחԡkr^ljc =
Cw)k?(ZߠZm6rJ7yîa%<u xK8SJ@7T`]ULܡɟ z7ysO}97қ<nőFt7 fݗ7yu&\Vϛ gSm^zIb5W 7)~GiGL[UcJfb-e Wo<dףAJQYD{ELsɝdW^j蔭t}94O3!Rq^,Kٰ_ z&GPr}A9M͛/I:Ӱ t5%yxL*/7.Pm uW:/MRqh6<T&0ԎƋ
ev/CO2tj@[ i+E[ СvD/Cdro3/Y`0Ǥܑw=`*C
b$fe+77Ro! ˻g%x ' ]v;[#EG~Jâ-$fK̓RR
O*z6?oA1/'i /"Ps8 ,9b\s`zD댏xb O#bBoe>?S`& Ǽ`-؊A( @ö(\$״oa$zDgQGDIz=C-%CX]UtKz+QTxċ5<Zj(ru^sxgrUugR5&^9lUϯbIcZ1r"\yl-e_Sdm1}q_U'ѢrrURFZ|Hy`QXbW>VRuqiī{,vEvg94e3.tW9 yUJ6Bu귍 aCx5s#NIŵ^NîKAņ}Е5'_2|^\1-Y6Z鵙@"?I'!";ZGzZ)Ti Wi_Q'VvC҉ZIwh3<2Y,E7V AEaZ_Sb
7bb [>wsm [OdFE=O YA3scһW"xͧ3~p40j
&:K7'g|9?]DI NP9 1l#JA F[$I`)It[FcOi?Fz#.hiP}퀌|Y!]я/$">2pnMV+Y$|#XD »u+NrItŸ>Hb{}91W11>_:Z/#f{kh eӮX̗*5KL n/}!]F0|E e̳
qX r3"6&\vxQ#Yb&$/;eedYy$/eWO~ `/kE1^/04Ǽ68ִf,?ResZkL'/
{d^/+A"LVO:Ƥyſ'Kķ|80K4R_Jv+E =yؗI/֍!Yә` I~tBK='
e^1g
ċ"lϋVXy5R3o$a~G?P~y9y,OkٚkK(]|
|{ɛ<7_M> `o/:T%WJZ$헰^Tfxm 9
Uko(T9mJӒPN.1rsC[Cݎg&L<-z0PC9
BE'RJ ?}Zvb[$ѢUtaz$pnxBȰ n ld&Tz ]~M[m6 #`vo^twָ6S,'Hxm}Zcb
֣~WnE쯇={dYwUyxvO:q6X,l5#VrQ.6ʲWBm_,Xc$ddւR-J<p#=_HEe3wӾ +)NDyXFhݖrw7<Akul!}k>W^=",(d="5,b2."%Yf!rh'e\֙"7O̓y2E Y˸2<C'PɋسE2hEY.bQ/okzw?w7OB+A+j1&~/x_J}*e' D7фO7e\ Ea2ˊ<qd2y" Op 2&2x E6C'Pf!'CP1 fC'PD pfaJ(Ӊq𩓢A䳹A2l]dRƿ!P)I~j 2;uMGgX+kt"@V鵻( .xj,]
N[DPD iACPmFt=qɞTm \gFlxA{gbqRieICIl R0 ``F#of)
iW d YP f&Z+ݫ #p<F |̶9Jf3XfѴءfA9-J OF\ݶrtMH*p
K+Np@6,VKj"ZZ+`A-,VE=h5|R<Dk6S@ih܃t2(aOz`+@n;Z _!@lK4vV -wn:#FѣȝY4RPJddi#
BIT YM$ }ɧnVb5Fp->v8>% I^<Gu "%0D ,f=ݤnv;k!)-UjS'm N5b`6F*~4e@N. 4Zْ
|vRpUYKh;+abb. `4uRKl >Yj bŌ
ʀ[8dlV|H,>Z[RقZlVP& " m&
ԟ-tb
8b
eRh-LgRK g+*jZIͶ5q-~ ֧-z_5*y=e*# مZkA:vJ6TZgW]ڥQ9=xl!4mʇq>ԧ>Z]6VB6c<t4 [pu7]v7n TUj3j^EUjo|
{.-\Ԉ}Wk< 6~Z틣w#>wl
|^-/Wt[n}IyҤ}r{6/kʋ [n~g~5vpAWmTp]SW>l"
ߌ`s曨[mF8<^O9z_{_?oX{gc~ qk}nۊ/SkLJN_I|ݛӵ['Wz<o}[@>{|W5ߘn]^|OwEF^{幘*DuT=8&=?sf/5^nzV -ҩFc5q! jv.&5*k.?٤T߅gz.NSl=s.O"5U -vk;ksH9ۨFP"{nG C*C A$uUnFIM \R$ Ԩyz)9H%JWH89yUJ&h!8#HgcGD3zFRZ-R|isBI8~+b3Ζg^ pNUt
xw%nԦ_V2?/8.[Wћ}+ <u? hGM9Ct t^ЊK/J5z EgZMBΤ6Qw"a zY?{iзu|DaφSfp%YPm V<fn+^{̰z otuI-QFXӆ,kf Q0cPac6Nqڛ_[~,6Ny:
cY,^zg}Zb|
w~uT 5i=w<&T?:MFIDQ9*x!V)k PI
辪h#%4.-HN.- Y^?{I1z۶v5@ Ƕ@`_Դ%Jx0~~t"quLa\\!?
u63Y ?TC m줒9:jc'0V)*uu"Ƽz mbR!O ޒxr #mTNTmNr 5]M [u;c%bxXk}"6 m:|5 $JnעZ.ҚKK3 ( ƶ L B 0( Ne