Great! I just modified my check to verify netapi32.dll is later than 6.0.6001.18156 and it's working. Thanks so much!
Mary Ide Internet Security Engineer Johnson & Wales University SANS GCIH #1794 SANS GWAS #1728 [EMAIL PROTECTED] -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Calvin Krzywiec Sent: Friday, October 24, 2008 5:35 PM To: [email protected] Subject: Re: Microsoft Patch Just tested in Vista and moved into production. The check that I used verifies that netapi32.dll is later than 6.0.6001.18156 -- Cal A. Krzywiec Network Engineer The University of Scranton Phone: (570) 941-6748 Email: [EMAIL PROTECTED] Mary-Ellen Ide wrote: > > I have created the rule for Vista and XP, and set the requirement up > as an “audit”. > > I patched Vista and it failed the audit check (see attachment). Has > anyone been able to get this working with Vista? I checked the > netapi32.dll and it is version 6.0.6001.18157. > > I am in the process of patching Win XP and will then test that one….. > > > > Mary Ide > > Internet Security Engineer > > Johnson & Wales University > > SANS GCIH #1794 > > SANS GWAS #1728 > > [EMAIL PROTECTED] <BLOCKED::mailto:[EMAIL PROTECTED]> > > > > *From:* Cisco Clean Access Users and Administrators > [mailto:[EMAIL PROTECTED] *On Behalf Of *Stanclift, Michael > *Sent:* Friday, October 24, 2008 10:28 AM > *To:* [email protected] > *Subject:* Re: Microsoft Patch > > > > I setup the registry key below for XP, here is what I’m setting up for > Vista. Not 100% sure if it will work but I don’t see why it wouldn’t. > It checks for netapi32.dll file version 6.0.6001.18157 which is what > my computer reported as being installed after the update. Getting > ready to test it right now. > > > > (attached) > > > > *Michael Stanclift* > > *Network Analyst* > > *Rockhurst University* > > > > http://help.rockhurst.edu <http://help.rockhurst.edu/> > (816) 501-4231 > > > > *From:* Cisco Clean Access Users and Administrators > [mailto:[EMAIL PROTECTED] *On Behalf Of *bouchaiba > *Sent:* Friday, October 24, 2008 7:45 AM > *To:* [email protected] > *Subject:* Re: Microsoft Patch > > > > Hi , > > > > Here are the registry keys for XP > > 1-Windows XP Service Pack 2 and Windows XP Service Pack 3: > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows > XP\SP4\KB958644\Filelist > > > 2-Windows XP Professional x64 Edition and Windows XP Professional x64 > Edition Service Pack 2: > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP Version > 2003\SP3\KB958644\Filelist > > According to microsoft ,there are no reg keys for vista. > > > > > > -----Original Message----- > From: Todd Joyce > Sent: Oct 24, 2008 8:02 AM > To: [email protected] > Subject: Microsoft Patch > > Anyone figured out a check yet? > > Todd Joyce > Radford University > > -- > Todd Joyce > [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > > Pain is the precursor of change > > > ------------------------------------------------------------------------ >
