Need Help with Win 2008 Network Access Protection

[Guest Rob]

I'm following Microsoft's "Step By Step Guide: Demonstrate DHCP NAP

Enforcement in a Test Lab" but am having difficult. I have the 2 servers

and 1 client set up per the directions, but am having 2 problems:

1. In the 1st test where the only SHV requirement is to have the Windows

Firewall on, despite having it turned on in my Vista SP1 client, the machine

is still being shunted to the restricted.contoso.com domain through DHCP.

If I turn off NAP for the DHCP scope, then the client goes into the default

contoso.com domain. Is there a way to see what's failing in the validation?

I can't see anything in the NPS server event logs.

2. Despite having a router option configured for both the default and the

NAP advanced classes in the DHCP scope on NPS1, when the client fails the

validation and is put in the restricted.contoso.com domain, it does not

receive a default gateway value.

 

Can anybody lend assistance?

 

Many thanks!

-Rob