I've created a rule but have not tested it extensively. I know it works
for my Vista Ultimate. The rule is:
Registry Check --> Registry Value
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\
Value Name = CSDVersion
Value Data Type = String
Operator = equals
Value Data = Service Pack 1
Operating System = Windows Vista (All)
Then under the Requirement-Rules for the Windows Security Update I went
to each Vista type and set "Requirement met if" to "Any selected rule
succeeds" and checked this new Vista_SP1 rule that I created.
Michael Simpson
Network Engineer
Utah Valley State College
[log in to unmask]
(801)863-8864
>>> "Sean A Thomas" <[log in to unmask]> 3/19/2008 10:20 AM >>>
Well, I have gotten my first case of Vista SP1 causing CCA to fail the
checks. Below is the snippet from the log for failed checks. The
user
uninstalled the SP to get back on. Has anyone created an rule to let
it
get by, or are you filtering them?
Failed Checks:
pc_KB929123_1_MS07-034_Vista, File Check [$SYSTEM_32\acctres.dll later
than [C]06/11/2007 00:00:00]
pc_vista64, Registry Check [\HKEY_CURRENT_USER\Software\Wow6432Node\
exists ]
________________________________
Sean A. Thomas, MCP, RHCT
Academic Systems Administrator
Embry-Riddle Aeronautical University
[log in to unmask]
386-226-6193 - Office
Any technology questions or issues, please contact IT Support at
386-226-6990
________________________________
From: Cisco Clean Access Users and Administrators
[mailto:[log in to unmask]] On Behalf Of Justin Howell
Sent: Monday, March 17, 2008 11:17 AM
To: [log in to unmask]
Subject: Re: Vista SP1 Here Tomorrow
Yeah I gave the same argument regarding XP SP3 a couple of weeks a go,
and was told 'Per advise from developers NAC appliance don't support
Release Candidates of any service packs.' Now whether that means they
don't even start work until after the official release, who knows for
sure.
Justin Howell
Telecommunications Network Technician
Solano Community College
From: Cisco Clean Access Users and Administrators
[mailto:[log in to unmask]] On Behalf Of Osborne, Bruce
W.
(NS)
Sent: Monday, March 17, 2008 8:07 AM
To: [log in to unmask]
Subject: Re: Vista SP1 Here Tomorrow
But since RTM was publically available, that should have started the
clock ticking ...
From: Cisco Clean Access Users and Administrators
[mailto:[log in to unmask]] On Behalf Of Justin Howell
Sent: Monday, March 17, 2008 11:06 AM
To: [log in to unmask]
Subject: Re: [CLEANACCESS] Vista SP1 Here Tomorrow
I've misplaced the email I got from a Cisco engineer, but their policy
is "45 days (+/-)" from the service pack release ...
Justin Howell
Telecommunications Network Technician
Solano Community College
From: Cisco Clean Access Users and Administrators
[mailto:[log in to unmask]] On Behalf Of Osborne, Bruce
W.
(NS)
Sent: Monday, March 17, 2008 6:50 AM
To: [log in to unmask]
Subject: Vista SP1 Here Tomorrow
Hey, Cisco
According to this article,
http://www.computerworld.com/action/article.do?command=viewArticleBasic&
taxonomyName=windows&articleId=9068818&taxonomyId=125&intsrc=kc_top
Vista SP1 will be deployed starting March 18 (tomorrow) and will
Automatic Update in mid-April.
We are already seeing some Vista SP! RTM. Since the RTM has been
widely
available, I would expect Cisco has been performing due diligence and
will have SP1 support soon.
What is the goal or timeline for Vista SP1 support in Clean Access?
Bruce Osborne
Liberty University
=
|
