a certification authority for NAP clients that it deems to be compliant with the relevant requirements. NAP clients can be placed on a restricted network if they are deemed non-compliant. The restricted network is a logical subset of the intranet and contains resources that allow a noncompliant NAP client to correct its system health. Servers that contain system health components or updates are known as remediation servers. A noncompliant NAP client on the restricted network can access remediation servers and install the necessary components and updates. After remediation is complete, the NAP client can perform a new health evaluation in conjunction with a new request for network access or communication. NAP client support A NAP client ships with Windows Vista, Windows 7, Windows 8 and Windows 8.1 but not with Windows 10. A limited NAP client is also included in Windows XP Service Pack 3. It has no MMC snap-in and does not support AuthIP-based IPsec enforcement. As such, it can only be managed via a command-line tool called netsh, and the IPsec enforcement is IKE-based only. Microsoft partners provide NAP clients for other operating systems such as macOS and Linux. See also Access control Network Admission Control Network Access Control Network security Computer security PacketFence References External links Microsoft's Network Access Protection Web page Microsoft's Network Access Protection Web page on Microsoft Technet NAP Blog on Microsoft Technet Microsoft's Network Access Protection Design Guide on Microsoft Technet Microsoft's Network Access Protection Deployment Guide on Microsoft Technet Microsoft's Network Access Protection Troubleshooting Guide on Microsoft Technet Microsoft Windows security technology Windows Server