Performing posture assessment once a day

[dgaikwad]

Hi Experts,

There is this requirement that I am testing out at a client.

We are using NAM to allow machine and user authentication, so when both pass then access is granted.
The client wants the posture assessment to run once a day, so make this work I went to Administration -> System -> Settings and Posture General Setting, and made the setting Perform posture assessment to every 1 day.
Since, then what I have observed is that, when the user logs off from the machine and tries to login back, he gets error message that no logon servers found.
When checked the logs, the machine was authenticated, but the user login failed, due to the above error.
The only way to get around this was to restart the computer and re-login the user, thus making machine and user both succeed.

Any idea why this might be happening?

[Dustin Anderson]

When the user logs out, what do you do with the PC only authentications? Do they sit on a network that can't access AD servers?

[dgaikwad]

Yes, when the user logs off, there is one authorization profile is used.

Basically, when machine passed but use fails, limited connectivity ACL is pushed on the port. This ACL only has access to PSN, DNS, DHCP and AV Servers.