Network Access Protection

Microsoft are getting round to stopping a client connecting to a network if they are not up to date on patches/av software etc according to Exchange Security. When implemented and hopefully they'll release it for w2k machines later, clients can connect to a different subnet where they can then quickly download av or windows update patches to the machine before they are allowed full access to the network. This will make updating machines a lot quicker whilst protecting the lan (and hopefully force those stinking users to keep their machines up to date rather than ignoring the windows update patches). The faq gives a good rundown on whats needed.