System Health Validator Point
This role is used to validate what we define as good or bad system health when working with Microsoft Network Access Protection. This is similar to the commonly known Network Access Control, where devices are initially hosted on a remediation network to update any software, such as antivirus or operating system patches, before they are allowed onto the production or corporate network. Generally speaking, this is seldom used in Configuration Manager implementations for various reasons; however, those that do have the role installed should know where to go when trouble ensues. There are a number of prerequisites required outside Configuration Manager to run this solution, so the first check is to make sure that the network switches are configured correctly and functioning, the DHCP options are configured and functioning, and that your Microsoft Network Policy Server and Active Directory forest are in good health. A good source of information for the prerequisites...