Network Access Control

Hi people,

My security department has assign me the task to deploy SNAC 12.1.2 RU2 ONLY to the Laptop / wireless LAN enabled computer in my company, there are around 1100 workstations combined altogether of Workstation without WLAN at all and the laptop with builtin WLAN chipset.

So my questions are:

1. What are the implication of enabling the SNAC component to the Desktop with no WLAN ?
2. Since some of the users still in SEP 12.1 RU1 MP1 and some of them are in 12.1.2 RU2 how can I deploy the SNAC 12.1.2 to all of these clients consistently without causing major reboot or network disruption to the workstations ?

My 2 pence worth 

1. The implications depend entirely on what actions you impose on the clients failing the HI check.  Enabling SNAC alone on a machine does nothing.  Assigning a HI check alone, means you check for the requirements specified within the policy, but nothing else.  Only if you include remediation actions within the policy, or attempt blocking will you see any adverse effects.  Following on from your other SNAC threads, I'd likely suggest you investigate the options of separating out your laptops from your desktops in the SEPM group structure.
2. If they've already got SEP installed, then you don't do any client installation per se.  You just add the SNAC license to the SEPM and it should automatically enable the SNAC component within the SEP Clients.  SNAC is included in all SEP Clients by default, but is disabled unless the SNAC functionality is licensed/enabled from the SEPM.  This means the SEP/SNAC client will always be of the same version.

ok, I'll makesure that the SEP client area all the same version first and then deploy the SNAC component.