Constraints Properties

Applies To: Windows Server 2008, Windows Server 2008 R2

Constraints are additional network policy parameters that are optional. Constraints differ from network policy conditions in one substantial way: when a condition does not match a connection request, NPS continues to evaluate other configured network policies in search of a match for the connection request, but when a constraint does not match a connection request, NPS does not evaluate additional network policies; NPS rejects the connection request and the user or computer is denied network access.

Following are the constraints that you can configure in a network policy:

• Authentication methods

  Allows you to specify the authentication methods that are required for the connection request to match the network policy.

• Idle timeout

  Allows you to specify the maximum time, in minutes, that the network access server can remain idle before the connection is disconnected.

• Session timeout

  Allows you to specify the maximum amount of time, in minutes, that a user can be connected to the network.

• Called station ID

  Allows you to specify the telephone number of the dial-up server that clients are allowed to use to access the network.

• Day and time restrictions

  Allows you to specify when users are allowed to connect to the network.

• NAS port type

  Allows you to specify the access media types that are allowed for users to connect to the network.