16.9. Deploy Full Production with Policy Enforcement

After you roll out NAC to a wide user group and ensure that you have an appropriate level of compliance with policies (as well as a proper machine-patching and software-distribution strategy), policy enforcement can move into full swing. Chapters 8 and 9 can give you a sense of which policies to enact, as well as when and how to enforce them. After you develop the appropriate policy approach, simply flip the switch and get things moving. Make sure that your helpdesk is ready to take on any additional calls in the first few weeks from end users who have issues that they can't correct on their own. If you do a sufficient job of evaluating policies, as discussed in the preceding section, you probably don't have to worry too much about this.