Network Access Protection Agent (napagent) Service Defaults in Windows 8

The Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer.

Default Settings

Startup type:Manual
Display name:Network Access Protection Agent
Service name:napagent
Service type:share
Error control:normal
Object:NT AUTHORITY\NetworkService
Path:%SystemRoot%\System32\svchost.exe -k NetworkService
File:%SystemRoot%\system32\qagentRT.dll
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\napagent
Privileges:
  • SeChangeNotifyPrivilege
  • SeImpersonatePrivilege

Default Behavior

Network Access Protection Agent is a Win32 service. In Windows 8 it will not be started until the user starts it. When the Network Access Protection Agent service is started, it runs as NT AUTHORITY\NetworkService in a process of svchost.exe, sharing it with other services. If Network Access Protection Agent fails to start, the error details are added to Windows 8 error log. When the operating system startup is complete, the user is being notified that the napagent service hasn't been started.

Dependencies

Network Access Protection Agent can't start, if the Remote Procedure Call (RPC) service is disabled or not available.

Restore Default Startup Configuration for Network Access Protection Agent

1. Select your Windows 8 edition and update pack, and then click Download.

2. Save the Win8_napagent_Service_Startup.cmd file to a local storage device.

3. Run the saved file as an administrator.

4. Restart the computer.

The napagent service is using the qagentRT.dll file that is located in the %WinDir%\system32 folder. If the file is corrupted or deleted, you can put it back in there.