As you know, I am a big fan of the concepts behind Network Access Protection as it allows to dynamically define zones on you network.
We just published a whitepaper called Manage Network Access Protection at Microsoft:
Network Access Protection (NAP) is a powerful new Windows Server 2008 feature that can help protect networks from malicious software (malware) and other threats. Describes how organizations can use NAP to institute requirements for accessing a network, create policies that check for compliance with those requirements, and update and manage devices that are not in compliance.
Here you find this information: