"Microsoft Network Access Protection (NAP) is meant to work with future versions of active directory, domain isolation, but the problem with the Microsoft solution is it only works with Microsoft," Bittinger said.

"Certification authority is the approach it is using with its suggested mechanism and it might not come in until Longhorn, but Microsoft has ideas of issuing certificates, without which you cannot get access to anything, and which will control who can access within the whole Microsoft-type of environment.

"But we don't really know all the details as yet and it is not able to be tested."