Checklist: Deploy SHAs and SHVs

Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2

This parent checklist includes cross-reference links to important concepts about system health agents (SHAs) and system health validators (SHVs). It also contains links to subordinate checklists that will help you complete the tasks that are required to implement this design.

Note

Complete the tasks in this checklist in order. When a reference link takes you to a conceptual topic or to a subordinate checklist, return to this topic after you review the conceptual topic or you complete the tasks in the subordinate checklist so that you can proceed with the remaining tasks in this checklist.

Checklist: Deploy SHAs and SHVs

	Task	Reference
	Review concepts and examples for deploying health requirements.	NAP Client Computers Stages of a NAP Deployment
	Install SHVs on NAP health policy servers and deploy SHAs to client computers.	Choose a Compliance Strategy System Health Validators
	Configure a health policy to use the new SHV. Note Network Policy Server (NPS) will report client health from all SHAs that are enabled in a health policy. You can also configure a network policy with this health policy condition, but this is not required if an existing network policy already matches NAP client access requests. When a client requests network access, it will provide health status for all installed SHAs that are enabled in NPS health policies.	Health Policies
	Configure NAP reports to provide compliance data for the new health requirements.	Track Compliance with Security Policies NAP Reporting
	Configure network policies to use the new health requirement in deferred enforcement mode.	Network Policies Configure Network Policy for Deferred Enforcement
	Configure network policies to use the new health requirement in full enforcement mode.	Configure Network Policy for Full Enforcement