# Localized 08/22/2013 12:33 PM (GMT) 303:4.80.0411 NPAS.psd1 # Only add new (name,value) pairs to the end of this table # Do not remove, insert or re-arrange entries ConvertFrom-StringData @' ###PSLOC start localizing # # helpID = VersionTooLow # NpsServiceStatus_Title=The Network Policy Server (NPS) service should be running. NpsServiceStatus_Problem=The Network Policy Server (NPS) service is not running. NpsServiceStatus_Impact=The Network Policy Server (NPS) service is unavailable. Client computers requesting access to the network cannot authenticate and are denied network access. NpsServiceStatus_Resolution=Start the Network Policy Server (NPS) service. NpsServiceStatus_Compliant=The NPAS Best Practices Analyzer scan has determined that you are in compliance with this best practice. AtleastOneCAConfigured_Title=The Health Registration Authority (HRA) server should be configured with at least one valid certification authority (CA). AtleastOneCAConfigured_Problem=The Health Registration Authority (HRA) server is not configured with a valid certification authority (CA). AtleastOneCAConfigured_Impact=The Health Registration Authority (HRA) server cannot acquire health certificates on behalf of Network Access Protection (NAP) clients. NAP client computers are denied network access. AtleastOneCAConfigured_Resolution=Configure the Health Registration Authority (HRA) server with at least one valid certification authority (CA). AtleastOneCAConfigured_Compliant=The NPAS Best Practices Analyzer scan has determined that you are in compliance with this best practice. HraAcceptsHttpHttps_Title=Internet Information Services (IIS) settings for the Health Registration Authority (HRA) server should accept HTTP and HTTPS communication. HraAcceptsHttpHttps_Problem_Warning=Internet Information Services (IIS) settings for the Health Registration Authority (HRA) server do not accept HTTP and HTTPS communication. HraAcceptsHttpHttps_Problem_Error=Internet Information Services (IIS) settings for the Health Registration Authority (HRA) server do not accept HTTP or HTTPS communication. HraAcceptsHttpHttps_Impact_Warning=Network Access Protection (NAP) client computers might not be able to acquire health certificates or communications with NAP client computers will not be encrypted with Secure Sockets Layer (SSL). HraAcceptsHttpHttps_Impact_Error=Network Access Protection (NAP) client computers cannot obtain health certificates. HraAcceptsHttpHttps_Resolution=To enable HTTPS communication, provision a Secure Sockets Layer (SSL) certificate on the Health Registration Authority (HRA) server, and then configure Internet Information Services (IIS) to accept HTTPS requests. To enable HTTP communication, configure IIS to accept HTTP requests. HraAcceptsHttpHttps_Compliant=The NPAS Best Practices Analyzer scan has determined that you are in compliance with this best practice. FirewallExemptionForHttpHttps_Title=Firewall settings for the Health Registration Authority (HRA) server should allow HTTP and HTTPS communication. FirewallExemptionForHttpHttps_Problem_Error=Firewall settings for the Health Registration Authority (HRA) server do not allow HTTP and HTTPS communications. FirewallExemptionForHttpHttps_Problem_Warning=Firewall settings for the Health Registration Authority (HRA) do not allow HTTP or HTTPS communication. FirewallExemptionForHttpHttps_Impact_Error=Incoming health certificate requests are blocked. Network Access Protection (NAP) client computers cannot obtain a health certificate from the Health Registration Authority (HRA) server. FirewallExemptionForHttpHttps_Impact_Warning=Incoming health certificate requests might be blocked. If certificate requests are blocked, Network Access Protection (NAP) client computers cannot obtain a health certificate from the Health Registration Authority (HRA) server. FirewallExemptionForHttpHttps_Resolution=Configure firewall exemption settings to allow HTTP and HTTPS communication for the Health Registration Authority (HRA) server. FirewallExemptionForHttpHttps_Compliant=The NPAS Best Practices Analyzer scan has determined that you are in compliance with this best practice. IISComponentsInstalled_Title=The Health Registration Authority (HRA) server should have all required Internet Information Services (IIS) components installed. IISComponentsInstalled_Problem=Required Internet Information Services (IIS) components are not installed on the Health Registration Authority (HRA) server. IISComponentsInstalled_Impact=The Health Registration Authority (HRA) server cannot process health certificate requests. Network Access Protection (NAP) client computers are denied network access. IISComponentsInstalled_Resolution=Reinstall the Health Registration Authority (HRA) role service and all dependent roles and role features. IISComponentsInstalled_Compliant=The NPAS Best Practices Analyzer scan has determined that you are in compliance with this best practice. NpsCrpEnabled_Title=Network Policy Server (NPS) should have at least one connection request policy enabled. NpsCrpEnabled_Problem=No connection request policies are enabled on Network Policy Server (NPS). NpsCrpEnabled_Impact=Client computers requesting access to the network cannot authenticate and are denied network access. NpsCrpEnabled_Resolution=Create and enable a connection request policy on Network Policy Server (NPS) to process client computer authentication requests. NpsCrpEnabled_Compliant=The NPAS Best Practices Analyzer scan has determined that you are in compliance with this best practice. NpsNetworkPolicyEnabled_Title=Network Policy Server (NPS) should have at least one network policy enabled. NpsNetworkPolicyEnabled_Problem=No network policies are enabled on Network Policy Server (NPS). NpsNetworkPolicyEnabled_Impact=Client computers requesting access to the network cannot be authorized and are denied network access. NpsNetworkPolicyEnabled_Resolution=Create and enable a network policy on Network Policy Server (NPS) to process client computer authorization requests. NpsNetworkPolicyEnabled_Compliant=The NPAS Best Practices Analyzer scan has determined that you are in compliance with this best practice. CertificateLifeTime_Title=The Health Registration Authority (HRA) server should be configured with a validity time for health certificates of at least 20 minutes and no more than 24 hours. CertificateLifeTime_Problem=The validity time configured for health certificates is less than 20 minutes or more than 24 hours. CertificateLifeTime_Impact=Network Access Protection (NAP) client computers will renew their health certificates too frequently or infrequently, and might be unable to acquire a health certificate. CertificateLifeTime_Resolution=Configure the validity time for health certificates to be greater than 20 minutes, but less than 24 hours. CertificateLifeTime_Compliant=The NPAS Best Practices Analyzer scan has determined that you are in compliance with this best practice. NpsAuthentication_Title=Network Policy Server (NPS) should be configured to use more secure authentication methods. NpsAuthentication_Problem=Network Policy Server (NPS) has the following policies configured that use less secure authentication methods.{0}{1} NpsAuthentication_Impact=Client computers requesting network access can use authentication methods that are less secure. NpsAuthentication_Resolution=Configure Network Policy Server (NPS) to use more secure authentication methods such as PEAP-MSCHAPv2 or PEAP-TLS. Identical authentication methods must also be configured on client computers. NpsAuthentication_Compliant=The NAP Best Practices Analyzer scan has determined that you are in compliance with this best practice. NasRunningLocally_Title=Network Policy Server (NPS) should be configured as a network access server (NAS), or NPS should be configured with RADIUS clients. NasRunningLocally_Problem=Network Policy Server (NPS) is not configured as a network access server (NAS) and RADIUS clients are not configured and enabled. NasRunningLocally_Impact=Network access requests cannot be evaluated by Network Policy Server (NPS). Client computers requesting access to the network cannot authenticate and are denied network access. NasRunningLocally_Resolution=Configure and enable RADIUS clients, or configure Network Policy Server (NPS) as a network access server (NAS). NasRunningLocally_Compliant=The NPAS Best Practices Analyzer scan has determined that you are in compliance with this best practice. PolicyType_CRP=Connection request policies: PolicyType_NP=Network policies: '@