Protect an NPS configuration export and review its import limits

What must be reviewed before importing an exported NPS configuration?

Resilient network core with engineered blue and gold data paths.
DSE visual intelligenceNetworks & infrastructureGuide · 2 min read
Executive summary

What you need to know

What must be reviewed before importing an exported NPS configuration?

Potentially affected

Administrators moving Network Policy Server settings between Windows servers.

DSE recommendation

Store the export in an access-controlled location and name the administrators authorized to handle it.

Source facts

Importing an NPS configuration replaces the destination settings rather than merging with them. Microsoft prohibits this procedure when the source NPS database version is newer than the destination database. SQL Server logging settings are excluded from the export and must be configured manually on the receiving NPS. A Netsh export contains unencrypted RADIUS shared secrets in its XML file. Microsoft Learn.

Applicability

Identify the source and destination roles and verify the supported export and import method for their server versions. Review the complete configuration scope before treating the file as a single-policy backup. Account for server-specific endpoints and logging destinations in the transfer plan.

DSE recommendation

Store the export in an access-controlled location and name the administrators authorized to handle it. Record the source configuration and capture the destination’s current settings before import. Have the receiving owner review clients, remote servers, policy order, and logging configuration for that environment. Use a nonproduction transfer exercise before replacing settings on an active authentication server.

Verification

Refresh the management view and compare the imported settings with the approved transfer inventory. Test representative local and forwarded requests, accounting where applicable, and a request that should be rejected. Record the configuration differences and functional results separately. Remove temporary transfer access according to the approved handling plan once the import is accepted.

Official references

Microsoft Learn: Export an NPS Configuration for Import on Another Server. Source reviewed September 8, 2026.

Primary reference

Review the official source

Export an NPS Configuration for Import on Another Server · Verified September 8, 2026

Open official reference ↗
Plan the next step

Need help applying this guidance safely?

DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.

Talk with DSE