Configure Terminal Services Clients as Network Access Protection (NAP) Enforcement Clients for TS Gateway

    The Terminal Services NAP client configuration command (Tsgqecclientconfig.cmd) helps configure Terminal Services clients as NAP enforcement clients for TS Gateway.
    • Version:


      File Name:


      Date Published:


      File Size:

      3 KB

        This command performs the following tasks to configure the Terminal Services client as a NAP enforcement client for TS Gateway:

        • Adds the TS Gateway server name that you specify to the list of trusted TS Gateway servers on the client.

        • Starts the Network Access Protection Agent service and sets the service startup type to Automatic.

        • Enables the TS Gateway Quarantine Enforcement client.

        For more information and complete step-by-step instructions for configuring TS Gateway servers and Terminal Services clients for NAP, see the "TS Gateway Server Step-By-Step Setup Guide" (
    • Supported Operating System

      Windows Vista, Windows XP

        Important: To function as NAP enforcement clients, Terminal Services clients running Windows XP must also meet the following requirements:

        • Clients must have Remote Desktop Connection 6.0 installed. For information about how to download the installer package for RDC 6.0 or later, see Article 925876 in the Microsoft Knowledge Base. (

        • Clients must have the Network Access Protection (NAP) Client for Windows XP installed. This client is only available to Windows Server 2008 beta program members. For more information, see "Network Access Protection Client for Windows XP (Beta 3 Update)" (

        1. After you download the file, change the file extension to .cmd, and then run this command from the computer that you want to configure as a NAP enforcement client.

        2. When you open the command prompt, right-click the command prompt, and then click Run as Administrator. You must run this command with elevated privileges for the command to succeed.

        3. At the command prompt, type:
          tsgqecclientconfig TS_GATEWAY_SERVER_NAME

          where TS_GATEWAY_SERVER_NAME is the DNS name that the client uses to connect to the TS Gateway server.

        4. To specify more than one TS Gateway server, separate each server name with a \0 (for example, SERVER_NAME1\0SERVER_NAME2\0SERVER_NAME3).

        5. Restart the client computer to implement the configuration changes.

    Popular downloads

      • 01

        DirectX End-User Runtime Web Installer

        The Microsoft DirectX® End-User Runtime provides updates to 9.0c and previous versions of DirectX — the core Windows® technology that drives high-speed multimedia and games on the PC.

      • 02

        Malicious Software Removal Tool

        This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.

      • 03

        Microsoft Security Essentials

        Microsoft Security Essentials provides real-time protection for your home or small business PC that guards against viruses, spyware, and other malicious software.

      • 04

        Windows 7 Upgrade Advisor

        Download and run the Windows 7 Upgrade Advisor to see if your PC is ready for Windows 7. It scans your hardware, devices, and installed programs for known compatibility issues, gives you guidance on how to resolve potential issues found, and recommends what to do before you upgrade.

    Loading your results, please wait...

    Free PC updates

    • Security patches
    • Software updates
    • Service packs
    • Hardware drivers

    Microsoft Suggests

    The tablet that can replace your laptop. Surface Pro 3.
    Surface Pro 3
    With a 12” display, Surface Pro 3 has the power of a laptop in a lightweight, versatile form.
    Learn more