Hello,
I am running NAP (w/ DHCP enforcement) in a test domain, with one client PC for testing. I first setup NAP in this domain about a month and a half ago and remediation was working fine, in terms of the Configuration Manager System Health Agent. I had setup two separate NAP policies in ConfigMgr and when I logged into the client as an end user, it would run the system health check and recognize the updates were missing, so it would say "Updating" and proceed to download the updates and force a PC restart for installation.
In the last 3 weeks however, the auto-remediation appears to be getting stuck or freezing. I purposely remove one of the two security updates from the client PC so that I can test remediation again. When I log in now as an end user, it still recognizes that an update is missing so it will say "Updating," but when it gets to 30% downloading, it just stops, it never completes. I've let the client PC sit for over an hour and it will still say "Downloading updates 30%." I check the Processes running in Task Manager, and don't notice anything strange. I have confirmed the auto-remediation settings in the Network Policy Server (NPS) setup and made sure the Remediation server group settings are correct in terms of including the servers in which NPS, DHCP and Configuration Manager are located on.
If anyone has had similar experiences with auto-remediation in NAP, I would greatly appreciate any feedback.
Thank you,
Charles Thomas
I am running NAP (w/ DHCP enforcement) in a test domain, with one client PC for testing. I first setup NAP in this domain about a month and a half ago and remediation was working fine, in terms of the Configuration Manager System Health Agent. I had setup two separate NAP policies in ConfigMgr and when I logged into the client as an end user, it would run the system health check and recognize the updates were missing, so it would say "Updating" and proceed to download the updates and force a PC restart for installation.
In the last 3 weeks however, the auto-remediation appears to be getting stuck or freezing. I purposely remove one of the two security updates from the client PC so that I can test remediation again. When I log in now as an end user, it still recognizes that an update is missing so it will say "Updating," but when it gets to 30% downloading, it just stops, it never completes. I've let the client PC sit for over an hour and it will still say "Downloading updates 30%." I check the Processes running in Task Manager, and don't notice anything strange. I have confirmed the auto-remediation settings in the Network Policy Server (NPS) setup and made sure the Remediation server group settings are correct in terms of including the servers in which NPS, DHCP and Configuration Manager are located on.
If anyone has had similar experiences with auto-remediation in NAP, I would greatly appreciate any feedback.
Thank you,
Charles Thomas