Planning Your NAP Deployment

Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2

After you collect information about your environment and you decide on a Network Access Protection (NAP) design by following the guidance in the Network Access Protection Design Guide, you can begin to plan the deployment of your organization's NAP design. With the completed NAP design and the information in this topic, you can determine which tasks to perform to deploy NAP in your organization.

Reviewing your NAP design

If the design team that constructed the original NAP design for your organization is different from the deployment team that will implement the design, make sure that the deployment team reviews all final decisions with the design team. Review the following points regarding your NAP design:

• Evaluate the design team's strategy to determine the best physical topology for the placement of NAP servers in your corporate network by reviewing the following topics in the Network Access Protection Design Guide:

  • Planning the Placement of a NAP Health Policy Server

  • Planning the Placement of a NAP Enforcement Server

  • Planning the Placement of a NAP CA Server

  • Planning the Placement of a NAP Remediation Server

  • Planning the Placement of a NAP Health Requirement Server

  It is possible that the design team might leave the subject of NAP server placement for the deployment team. The deployment team is then responsible for documenting and implementing the physical topology of NAP servers. The deployment team can review the preceding topics and also the NAP Capacity Planning and Appendix A: NAP Requirements topics in the Network Access Protection Design Guide to help determine the number of servers and the hardware requirements for the organization.

• Ensure that members of the deployment team understand the reasons the selected NAP design is being deployed and how client and server computers will be affected. Ensure that members of the deployment team also understand the stages of the NAP deployment and what decisions govern when to advance from one deployment stage to the next. For more information, see Planning a NAP Deployment Strategy.

After the design teams and deployment teams agree on these issues, they can proceed with the deployment of the NAP design. For more information, see Implementing Your NAP Design Plan.

Reviewing NAP concepts

For more information about how NAP works and how to set up NAP in a test lab, see the following resources:

• Network Access Protection Design Guide

• Appendix B: Reviewing Key NAP Concepts

• Step-by-Step Guide: Demonstrate NAP IPsec Enforcement in a Test Lab (https://go.microsoft.com/fwlink/?LinkID=85894)

• Step-by-Step Guide: Demonstrate NAP 802.1X Enforcement in a Test Lab (https://go.microsoft.com/fwlink/?LinkID=86036)

• Step-by-Step Guide: Demonstrate NAP VPN Enforcement in a Test Lab (https://go.microsoft.com/fwlink/?LinkID=85896)

• Step-by-Step Guide: Demonstrate NAP DHCP Enforcement in a Test Lab (https://go.microsoft.com/fwlink/?LinkID=85897)

• TS Gateway Step-by-Step Guide (https://go.microsoft.com/fwlink/?LinkID=167919)

• NAP overviews, Webcasts, virtual labs, and announcements are available at https://go.microsoft.com/fwlink/?LinkId=113053.