Enforcing Policy Settings with a Network Policy Server

The goal of a Network Policy Server is to enforce policy settings defined by the administrator, for example, to configure the NPS role to block clients from connecting if they don’t have an antivirus application installed. There are multiple variations on this theme, but the same principles apply to each of the variations.

This section of the chapter focuses on describing a scenario where NPS is configured to block DHCP clients from receiving IP addresses if they do not have an antivirus application installed and if their antivirus definitions are out of date. The same overall process can be used for 802.1X validation, VPN validation, or IPSec validation.