Looking into more problematic machines, I noticed that even MCE 2005 machines were failing the check.  973768 installs correctly but still fails the check.  I looked around the registry and the key that CCA looks for (HKLM/Software/Microsoft/Updates/Windows XP/SP4/KB973768) is not present but the update puts the key in HKLM/Software/Microsoft/Updates/Windows XP/SP3/KB973768    I have not had to create that fake file so I am wondering why our situation is different.  We are running 4.1.3.2 agent. 

-----Original Message-----
From: Cisco Clean Access Users and Administrators [mailto:[log in to unmask]] On Behalf Of Mike Hanson
Sent: Monday, September 14, 2009 2:50 PM
To: [log in to unmask]
Subject: Re: XP Media Center Checks

Tom,

We have had around 5 Media Center machines fail Clean Access checks.
All of them were looking for this file   "
c:\windows\syswow64\kernel32.dll exists" . To get around the failure we
manually add that fake file and it passes the check. 

I agree, there is a problem with the Clean Access OS fingerprint.










Mike Hanson
Network Security Manager
The College of St. Scholastica
Duluth, MN 55811
 
(218)-723-7097
[log in to unmask]
>>> Tom Stachowiak<[log in to unmask]> 9/14/2009 1:37 PM >>>
I have seen three machines just today suffering from this. First one I

tried manually installing the kb hotfix but it did not fix the issue.
The 
original media center 2002 does not need it any newer 2003 and 4 get 
upgraded to media center 2005 when you install XP sp 2. They need to 
update the os fingerprint?