After going through 3 different TAC engineers on this case we managed  
to get a bug ID filed for it (CSCsk83429), although I have been told  
by Cisco that this is not really a "bug" in Cisco's software and is  
caused by Microsoft's security software.  You would think that if  
they say something is compatible with Vista that they would have  
tested it extensively.

Eric J. Kenny

On Oct 12, 2007, at 2:49 PM, Richard Brown wrote:

> Eric,
>
> We found the same issue, opened a TAC case, and did not find a  
> solution.  The only other option we have is to bounce the port  
> because we do not want to turn off UAC on student machines.  We  
> have not deployed our OOB solution yet, so it would be nice to  
> resolve this issue first.  If anyone else has any suggestions, let  
> us know.
>
> Richard Brown
> Network Design Technician
> Columbus State Community College
> 614-287-5993
> [log in to unmask]
>
> >>> Eric Kenny <[log in to unmask]> 10/11/2007 1:27 PM >>>
> Hi Everyone, just thought I would ask around if anyone has seen odd
> issues with Vista failing to refresh its IP in a L3OOB deployment.
> The problem seems to fix itself if you disable UAC in Vista, or run
> the Clean Access Agent as Administrator (which is not feasible in our
> situation).
>
> We do not bounce the switch ports and use the agent to do the DHCP
> release/renew.
>
> Eric J. Kenny
> Network Analyst
> Marist College
> 3399 North Rd.
> Poughkeepsie, NY 12601
> 845.575.3820