Create a Trusted Server Group
Applies To: Windows Server 2008, Windows Server 2012
Creating a trusted server group
Using the Windows interface
Using a command line
To create a trusted server group by using the Windows interface
To open the NAP client configuration console, click Start, click All Programs, click Accessories, click Run, type NAPCLCFG.MSC, and click OK.
In the console tree, double-click Health Registration Settings.
Right-click Trusted Server Groups, and then click New.
In the Group Name page of the New Trusted Server Group wizard, type the name of the new trusted server group, and then click Next.
In the Add Servers page of the New Trusted Server Group wizard, type the URL of an HRA server you want to add to the trusted server group, and then click Add. If your HRA server does not use server verification, then you must clear the Require server verification (https:) for all servers in this group check box before clicking Add.
Repeat step 5 until you had added all of the HRA servers that you want to add to the trusted server group.
Click Next to review the group name and the URLs of trusted servers, and then click Finish.
Additional considerations
- To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
To create a trusted server group by using the command prompt
To open a command prompt, click Start, click All Programs, click Accessories, and click Command Prompt.
Type: netsh nap client add trustedservergroup name = <group> requirehttps = <requirehttps>
Type: netsh nap client add server group = <group> url = <url> processingorder = <processingorder>
The following table provides a guideline for the placeholder text in the Netsh command.
| Placeholder | Possible Values | Description |
|---|---|---|
<group> |
Any text string. (Required) |
The name of the trusted server group that you are creating. |
<requirehttps> |
ENABLE, DISABLE (Optional) |
If set to DISABLE, then server verification (HTTPS) is not required. If no value is entered or requirehttps is set to ENABLE, then HTTPS is required. |
<url> |
Any valid URL, UNC path, or IP address. If requirehttps is set to ENABLED, the URL must use the https:// prefix. (Required) |
The URL of the HRA server that you want to add to the trusted server group. To add multiple URLs, reuse the same server group name. |
<processingorder> |
Any integer less than or equal to the total number of trusted server groups. Cannot be zero (0). (Optional) |
The processing priority you wish to assign to this trusted server group. |
Additional considerations
- To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.