No items in Security Group - Policy still applies

i have set nap client , im still in testing, want use few computers apply to.

im using nap via dhcp , set global security group called nap client computers. have wshv checks firewall. have created dhcp scope options have default user class point local dns server , dns domain name, , default network access protection point same dns servers , dns domain name of restricted.domain.local. have turned on nap in scope. have made group policy changed, , removed authenticated users security filtering , added nap client computers group created. group did not have members.

when users started logging in, getting on restricted network, why has happened? there no members in security group, policy should not getting applied.

 

hi mattym84,

 

thanks posting here.

 

i think need add policies in order exclude , except reset member hosts affected nap enforcement if want restrict several computers testing purpose not all：

 

design exception management strategy

http://technet.microsoft.com/en-us/library/dd125358(ws.10).aspx

 

determine policy strategy network access protection

http://technet.microsoft.com/en-us/library/bb680336.aspx

 

thanks.

 

tiger li

---

please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread.

Windows Server  >  Network Access Protection