Restricting NAP...

[jaminben]

Hi all,

 

We're trying to setup NAP for our BYOD system but struggling to get it working as we thought it should and could do with some advice.

 

We currently have it working with just the basic settings... for example, if we turn off the firewall on a client machine that machine will then have restricted access to the network (they get an incorrect ip address and subnet mask) but they can still see into domain shares and this is what we want to stop.

 

Anyone got any advice or can suggest a good tutorial that will allow us to prevent access to our network (shares) if the client doesn't meet our compliance restrictions (basically a non domain client).

 

Thanks

 

Ben