Windows Security Health Agent (WSHA) and Windows Security Health Validator (WSHV)

Note: This NAP blog post was originally published in January of 2007. For a current version of this post, click here


The WSHA and WSHV are the SHA/SHV delivered with Windows Vista and Longhorn Server. A version of the WSHA will also be available with the Network Access Protection Client for Windows XP SP2. They provide the ability to make network access decisions based on the following criteria:


  • Firewall is enabled

  • Antivirus is enabled and up-to-date

  • Antispyware is enabled and up-to-date

  • Automatic Updates is enabled

  • Security updates are up-to-date

Firewall, antivirus, and antispyware detection is available for both Microsoft and non-Microsoft applications. The WSHA detects any application that reports its status through Windows Security Center. The WSHA can automatically remediate Microsoft products only.


Security update status can be detected and remediated through the following sources:






Vista Client


Longhorn Server


Available now in RTM

Available now in Beta 2

Available now in Beta 2


Available in SP1

Available in Beta 3

Available in Beta 3


Mike Burk

WSHA/WSHV Program Manager

Comments (2)

  1. Anonymous says:

    Lot’s of NAP in the news over the past week or two, now if only I had the time and resources at the moment

  2. Anonymous says:

    We have had several questions lately about the WSHA/WSHV so we figured it was time to provide an update

Skip to main content