+ Post New Thread
Results 1 to 2 of 2
How do you do....it? Thread, A few MS NAP questions... in Technical; Hi guys, A couple of questions for people running MS NAP; 1) Can it be installed on the domain controller? ...
  1. #1
    Ben_Stanton's Avatar
    Join Date
    Jan 2007
    Location
    Hertfordshire
    Posts
    461
    Thank Post
    9
    Thanked 15 Times in 14 Posts
    Rep Power
    19

    A few MS NAP questions...

    Hi guys,

    A couple of questions for people running MS NAP;

    1) Can it be installed on the domain controller?

    2) Does it work with devices running OSx or mobile platforms?

    3) In terms of setting it up - hassle or easy?

    4) When a device is 'authenticated', where does it pick up an IP? Can I set all 'foreign' devices to pick up from a different range/scope?

    Cheers in advance,

    Ben

  2. #2

    Join Date
    Mar 2010
    Location
    Adelaide
    Posts
    133
    Thank Post
    2
    Thanked 19 Times in 17 Posts
    Rep Power
    13
    1) NAP is effectively controlled by the NPS role. This can be on a DC but in our case we found NPS was peaking the DC due to the number of authentications and so we moved it to its own server.

    2) I think there is a Linux NAP client but I haven't really looked. I would lean towards no for OSx, etc. NAP is tied very strongly to the Microsoft Security Center and so it's natural it is not on other platforms.

    3) NAP can tie in with 802.1X, DHCP, VPN, etc. Essentially it is easy if you make good use of the Event Viewer on the NPS server, but this is based purely on your skill level with whatever form you choose.

    4) Assuming you mean 802.1X (this is not NAP), NPS tells the switch to set a port after authentication to the chosen VLAN for that user. The IP comes from your DHCP server. As for 'foreign' devices, if they fail you can put them to another VLAN such as Guest or leave them in what I call the Remediation VLAN which gives them very little as a non-domain user.

    If you build a test environment, make sure it works as expected prior to introducing NAP to keep it simple (ie. if 802.1X is your choice, get this right before adding NAP components).



SHARE:
+ Post New Thread

Similar Threads

  1. Server 2K3 - Few questions
    By googlemad in forum Windows
    Replies: 6
    Last Post: 20th August 2007, 08:01 PM
  2. MS Win XP Pro Exam Cram & Practice Questions books
    By tosca925 in forum Books and Manuals
    Replies: 2
    Last Post: 14th May 2007, 02:13 PM
  3. need help with few A+ core questions
    By projector1 in forum General Chat
    Replies: 24
    Last Post: 26th February 2007, 01:08 PM
  4. BSF - A Few Questions...
    By Zoom7000 in forum BSF
    Replies: 14
    Last Post: 16th January 2007, 11:29 PM
  5. few dumb questions before i order
    By russdev in forum Mac
    Replies: 22
    Last Post: 4th December 2005, 03:45 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •