Select the allowed editions. Options are Home Basic, Home Premium, Business, Enterprise, Ultimate, and Starter.

The Critical / Security Updates Label that displays on the results page.

The URL for the web page where Windows-Server-2008 Critical / Security Updates information can be located and downloaded. Supply a local or Internet URL to display in the Failed Policy Results window if the host fails the scan.

Any custom scans that have been created are shown.

When selected, disables bridging on the host.

When selected Internet Connection Sharing is disabled on the host.

Enter a label. This label appears in the Results page information to identify which scan the host failed.

The URL for the web page where the specific edition information can be located and downloaded. Supply a local or Internet URL to display in the Failed Policy Results window if the host fails the scan.

See the enable automatic updates parameters table below.

When selected, the Windows Firewall is enabled.

Requires write access to the registry if done through the .

Do not enable Force DHCP on policies that will be used for VPN clients. Enabling this setting can cause the host to continuously lose its VPN connection.

Enter a label. This label appears in the Results page information to identify which scan the host failed.

If a Windows Operating System is selected from the Operating Systems List but none of the following are selected: Require Version/Build Number Enable Automatic Updates Require Critical Updates Detect Network Bridges Disable Internet Connection Sharing Require Security Updates Trigger SCCM Evaluation Scan results may list all the above with a result of "Passed".

When selected, prohibits Windows-XP Home Edition.

When selected, all Critical Updates are required for the host.

When selected, Require Critical Updates must be enabled on the host.

When selected will Require Security Updates to be enabled on the host.

When the checkbox labeled "Require Service Pack" is selected a text field displays. Enter the numeric value for the Service Pack Level.

The SCCM Evaluation label that is displayed in scan results to indicate that the SCCM Evaluation was triggered for the host.

The Service Pack Label that displays on the results page.

The required Service Pack Level. Enter the numeric value.

Select the Operator to apply to the definition value found on the host: greater than, equal to, or both.

URL for the web page where Service Pack information can be located and downloaded. Supply either a local or Internet URL. This URL is displayed in the Failed Policy Results window if the host fails the scan.

When selected, an upgrade is forced on the host from the SCCM controller. This ensures all hosts on the network are up-to-date. No error is generated within FortiNAC. See the SCCM controller for failure details.

This option is available for Windows 7, 8, 10, Windows-Server-2012, Windows-Server-2008-R2, and Windows-Server-2012-R2.

The Updates Label that displays on the results page.

When enabled, only those editions of Windows that are selected in FortiNAC Manager are permitted. When disabled, all/any edition of the selected Windows operating systems will be allowed, such as Windows Vista N or Windows Vista K.

Web address used for Windows update. The default is sma/windowsupdates.jsp.

Select True or False. Default = True.

If this option is enabled, users of hosts running the selected version of Windows can no longer set Windows Update Parameters for their own hosts. Registry keys for those settings are set by FortiNAC Manager and are locked. Changing this option to False does not remove the lock from the registry keys. The keys must be deleted to restore user access to Windows Update settings. Keys are as follows:

SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

Time to wait between the time Automatic Updates starts and the time it begins installations, where the scheduled times have passed. The time is set in minutes from 1 to 60, representing 1 minute to 60 minutes).

This setting only affects host behavior after the hosts have updated to the SUS SP1 client version or later.

Select True or False. Default = False.

If set to true, Automatic Updates does not automatically restart a computer while users are logged on. This setting affects host behavior after the hosts have updated to the SUS SP1 host version or later.

0 = Automatic Updates is enabled.

1 = Automatic Updates is disabled.

Default = 0

1 = Keep my computer up to date has been disabled in Automatic Updates.

2 = Notify of download and installation.

3 =Automatically download and notify of installation.

4 = Automatically download and schedule installation.

0 = Initial 24-hour timeout (Automatic Updates doesn't run until 24 hours after it first detects an Internet connection.)

1 = Waiting for the user to run Automatic Updates

2 = Detection pending

3 = Download pending (Automatic Updates is waiting for the user to accept the pre-downloaded prompt.)

4 = Download in progress

5 = Install pending

6 = Install complete

7 = Disabled

8 = Reboot pending (Updates that require a reboot were installed, but the reboot was declined. Automatic Updates will not do anything until this value is cleared and a reboot occurs.)

0 = Every day.

1 - 7 = The days of the week from Sunday (1) to Saturday (7).

The time of day in a 24-hour format (0-23).

Select True or False

Use or not use a server that is running Software Update Services instead of Windows Update.

http://<server>

This value sets the SUS server by HTTP name (for example, http://IntranetSUS).