>This means I cannot use the site's IP/Client Friendly Name as a filter for my NPS network policies   I've never tried creating NPS policies that way - and you ar right; that method won't work.  What I have done is match on AD groups and that works fine. ... View more