SCCM 2012 SP1 with NAP and Software Updates

[_Adam_]

We have successfully been running NAP now using NPS and WSUS for some years. To consolidate and treat SCCM as a one stop shop we have brought WSUS under its roof. By association this means NAP will also be controlled via SCCM.

 

Enabling NAP on updates is straight forward enough, but does anyone have any experience with ADR groups and NAP? When a new critical update is automatically deployed I suspect it does not get the NAP Evaluation enabled and therefore not get checked. Do we need to revert back to static update groups for NAP, or can someone offer some insight as to how ADRs handle NAP?

 

Thanks.

[_Adam_]

The simplistic answer is ADR and NAP do not work well together, unless you manually catch new updates and apply NAP Evaluations to them, or design a script to do this. Going to scrap the ADR configs and revert to static update groups which is less admin.