I've created a rule but have not tested it extensively. I know it works for my Vista Ultimate. The rule is:
Registry Check --> Registry Value HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Value Name = CSDVersion Value Data Type = String Operator = equals Value Data = Service Pack 1 Operating System = Windows Vista (All) Then under the Requirement-Rules for the Windows Security Update I went to each Vista type and set "Requirement met if" to "Any selected rule succeeds" and checked this new Vista_SP1 rule that I created. Michael Simpson Network Engineer Utah Valley State College [EMAIL PROTECTED] (801)863-8864 >>> "Sean A Thomas" <[EMAIL PROTECTED]> 3/19/2008 10:20 AM >>> Well, I have gotten my first case of Vista SP1 causing CCA to fail the checks. Below is the snippet from the log for failed checks. The user uninstalled the SP to get back on. Has anyone created an rule to let it get by, or are you filtering them? Failed Checks: pc_KB929123_1_MS07-034_Vista, File Check [$SYSTEM_32\acctres.dll later than [C]06/11/2007 00:00:00] pc_vista64, Registry Check [\HKEY_CURRENT_USER\Software\Wow6432Node\ exists ] ________________________________ Sean A. Thomas, MCP, RHCT Academic Systems Administrator Embry-Riddle Aeronautical University [EMAIL PROTECTED] 386-226-6193 - Office Any technology questions or issues, please contact IT Support at 386-226-6990 ________________________________ From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Justin Howell Sent: Monday, March 17, 2008 11:17 AM To: [email protected] Subject: Re: Vista SP1 Here Tomorrow Yeah I gave the same argument regarding XP SP3 a couple of weeks a go, and was told 'Per advise from developers NAC appliance don't support Release Candidates of any service packs.' Now whether that means they don't even start work until after the official release, who knows for sure. Justin Howell Telecommunications Network Technician Solano Community College From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Osborne, Bruce W. (NS) Sent: Monday, March 17, 2008 8:07 AM To: [email protected] Subject: Re: Vista SP1 Here Tomorrow But since RTM was publically available, that should have started the clock ticking ... From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Justin Howell Sent: Monday, March 17, 2008 11:06 AM To: [email protected] Subject: Re: [CLEANACCESS] Vista SP1 Here Tomorrow I've misplaced the email I got from a Cisco engineer, but their policy is "45 days (+/-)" from the service pack release ... Justin Howell Telecommunications Network Technician Solano Community College From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Osborne, Bruce W. (NS) Sent: Monday, March 17, 2008 6:50 AM To: [email protected] Subject: Vista SP1 Here Tomorrow Hey, Cisco According to this article, http://www.computerworld.com/action/article.do?command=viewArticleBasic&; taxonomyName=windows&articleId=9068818&taxonomyId=125&intsrc=kc_top Vista SP1 will be deployed starting March 18 (tomorrow) and will Automatic Update in mid-April. We are already seeing some Vista SP! RTM. Since the RTM has been widely available, I would expect Cisco has been performing due diligence and will have SP1 support soon. What is the goal or timeline for Vista SP1 support in Clean Access? Bruce Osborne Liberty University
