FIXED SCCM 1902 Prerequisite Error Network Access Protection (NAP) is No Longer Supported

Let us learn about FIXED SCCM 1902 Prerequisite Error Network Access Protection (NAP) is No Longer Supported.SCCM 1902 Opt-in(fast) ring got released last week.

Many organizations are trying to go through the staging environment or performing testing with the Opt-in version of SCCM 1902. More details about SCCM 1902 Prerequisite Check Failed error are in this post.

You will learn more about how to fix Network Access Protection (NAP) is no longer Supported Failed pre-requisite Check error.

It was updated on 23rd April – NOTE! – SCCM 1902 NAP is FIXED in SLOW ring.

Patch My PC

Related PostsSCCM 1902 Upgrade Step by Step Guide, SCCM known Issues, & SCCM Deprecated Features and Support

Introduction

I heard reports in the SCCM Professionals Facebook Group community about the prerequisite check error SCCM 1902 Network Access Protection (NAP) is No Longer Supported Failed.

This SCCM 1902 prerequisite failed error is reported by Thomas Hantsch & René Laurberg Jørgensen. Thomas raised a Microsoft support case and fixed the issue (SCCM 1902 Prerequisite Check Failed ).

SCCM 1902 upgrade got stuck in the pre-requisite check page with SCCM Network Access Protection (NAP) is No Longer Supported Failed Error.

Adaptiva

Error! – Network Access Protection (NAP) is no longer supported; Error; Configuration Manager has detected that you have software updates enabled for NAP. You must remove NAP policies from your environment before Setup can continue. For more information, see https://go.microsoft.com/fwlink/?LinkId=722800

Root Cause of SCCM 1902 Prerequisite Failure Related to NAP?

Have you ever enabled Network Access Protection (NAP) in your SCCM environment? My guess is decidedly fewer organizations must be using this feature.

As I already reported before, the SCCM Network Access Protection (NAP) is No Longer Supported with SCCM 1511 onward(
SCCM 1902 Prerequisite Check Failed).

As per the Microsoft premier support (and Thomas’s report in the FB group), Normally, there is a SQL maintenance task, which runs every 30 days to remove the tombstoned rows from the Quar_QuarantineCIs table. But, in this scenario, that task was not working with that one row.

The above-mentioned tombstoned entry in Quar_QuarantineCIs is causing SCCM 1902 prerequisite failure related to “Network Access Protection (NAP) is no longer supported by SCCM.”

FIX – SCCM 1902 Prerequisite Check Failed

IMPORTANT: I don’t recommend editing the SCCM SQL DB directly if you are doing it in the production environment. Directly editing DB is not a supported scenario.

Thomas shared that the Microsoft SCCM premier support engineer helped him to delete the tombstoned entry in the Quar_QuarantineCIs table.

First Step to Confirm SCCM 1902 Prerequisite Check Issue

You must check and confirm whether you have the same problem explained above. To prove the issue, you have to run the following query against your SCCM SQL DB (CM_CAS where CAS is SCCM site code).

SELECT * FROM Quar_QuarantineCIs

When you get a blank screen result (as you can see in the below screen capture) after running the SQL query mentioned below, then you don’t have an SCCM NAP tombstoned entry in your SCCM SQL DB and you’re okay to proceed with SCCM 1902 upgrade. No need to fix SCCM 1902 Prerequisite Check Failed errors 🙂

Second Step to Resolve SCCM 1902 Prerequisite Check Failure Issue

When you have the SCCM NAP tombstoned entry in your SCCM SQL DB, you have to raise a support case with Microsoft support.

NOTE!-I strongly recommend raising the ticket with Microsoft support if you have a contract with Microsoft’s support organization. Also, take the backup of your SQL DB before running the following query.

Delete from Quar_QuarantineCIs where IsTombstoned=1

Once you have successfully run the above query, you can rerun the SCCM 1902 prerequisite check and proceed with SCCM 1902 upgrade. I will update the list of SCCM 1902 known issues with this issue in a while.

Resources

6 thoughts on “FIXED SCCM 1902 Prerequisite Error Network Access Protection (NAP) is No Longer Supported”

  1. Hi anoop,

    I regularly follow your posts.While upgrading sccm 1806 to sccm 1902, I got FileCopy failed; 0x800704c8 error while checking prerequisites. The package downloads correctly and distributes to DP. While extracting package this error comes up. I have disabled Real time protection on windows defender from all site servers.

    Reply
  2. Hi,
    Trying manual upgrade 2012R2 to 1902 as I do not find any other versions prior to 1902. However, I get a prerequisite check error Link ID 722800. “SELECT * FROM Quar_QuarantineCIs” returned zero results.

    Reply
  3. Upgraded my 1810 SCCM to 1902 and now I am getting the following error on the managment point, I cannot find a reason why (I am no SCCM guru but still have this role)

    MP Control Manager detected management point is not responding to HTTP requests. The HTTP status code and text is 500, Internal Server Error.

    Possible cause: Management point encountered an error when connecting to SQL Server.
    Solution: Verify that the SQL Server is properly configured to allow Management Point access. Verify that management point computer account or the Management Point Database Connection Account is a member of Management Point Role (smsdbrole_MP) in the SQL Server database.

    Possible cause: The SQL Server Service Principal Names (SPNs) are not registered correctly in Active Directory
    Solution: Ensure SQL Server SPNs are correctly registered. Review Q829868.

    Possible cause: Internet Information Services (IIS) isn’t configured to listen on the ports over which the site is configured to communicate.
    Solution: Verify that the designated Web Site is configured to use the same ports which the site is configured to use.

    Possible cause: The designated Web Site is disabled in IIS.
    Solution: Verify that the designated Web Site is enabled, and functioning properly.

    Possible cause: The MP ISAPI Application Identity does not have the requisite logon privileges.
    Solution: Verify that the account that the MP ISAPI is configured to run under has not been denied batch logon rights through group policy.

    For more information, refer to Microsoft Knowledge Base article 838891.

    Reply
  4. Hi ANoop

    After upgrade to 1902, KB5700571 not been installed correctly as it stopped at pre-requisite failed due to disk space issue.
    I have checked disk space, it has more than 12GB still.
    Can you advise step to fix this

    Reply

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.