As you know (at least I hope that you do) we introduced Network Access Protection with Windows Server 2008. Thomas Shinder now published an article on WindowsSecurity.com about how to implement NAP and IPSec and Domain Isolation via Group Policies. It
Read More...
Read the complete post at http://blogs.technet.com/rhalbheer/archive/2008/10/14/deploying-ipsec-server-and-domain-isolation-using-windows-server-2008-group-policy.aspx