I just saw this issue with one Vista user. Not sure if anyone has figured this one out. Or I will open a TAC case as well.

Thanks,

Dennis Xu
Network Analyst
Computing and Communication Services
University of Guelph
5198244120 x 56217

----- Original Message -----
From: "ResNet-Info" <[log in to unmask]>
To: [log in to unmask]
Sent: Wednesday, April 22, 2009 3:14:12 PM GMT -05:00 US/Canada Eastern
Subject: Problems on 2 PCs w/Vista & WinUpdate KB960803


Hi all, 

We just got two cases of computers running Vista Home w/SP1 and all their updates, failing on KB960803. Vista says it's up to date, we've uninstalled and reinstalled the update, and it still won't pass. We're running 4.1.8 on the client and server. 

Looking in the Cisco rule for this update (we use the default Cisco rules) it's a file version check on the file c:\windows\system32\winhttp.dll. The file version on the two problem computers is the exact same file version as on a Vista computer that passes Clean Access. I copied that file from the passing computer to the failing computer (via a bootable Vista flash drive), and it still fails. I even copied an older version of the dll onto a PC that's passing the CCA checks, and it still passed. So I'm thinking that even though the CCA check for this says 'file version' everywhere, it's actually checking something else related to thsi security update. The problem is that this is the only file that is touched by this update. 

We're going to put in a ticket with Cisco about it, but just wanted to see if anyone out here has seen this and figured it out yet. I haven't found anything useful on google yet either. 

Thanks, 

Doug Chudzik 
ResNet Manager 
Wellesley College 
[log in to unmask]