Just tested in Vista and moved into production. The check that I used verifies that netapi32.dll is later than 6.0.6001.18156

--
Cal A. Krzywiec
Network Engineer
The University of Scranton
Phone: (570) 941-6748
Email: [EMAIL PROTECTED]



Mary-Ellen Ide wrote:

I have created the rule for Vista and XP, and set the requirement up as an “audit”.

I patched Vista and it failed the audit check (see attachment). Has anyone been able to get this working with Vista? I checked the netapi32.dll and it is version 6.0.6001.18157.
I am in the process of patching Win XP and will then test that one…..

Mary Ide

Internet Security Engineer

Johnson & Wales University

SANS GCIH #1794

SANS GWAS #1728

[EMAIL PROTECTED] <BLOCKED::mailto:[EMAIL PROTECTED]>

*From:* Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] *On Behalf Of *Stanclift, Michael
*Sent:* Friday, October 24, 2008 10:28 AM
*To:* [email protected]
*Subject:* Re: Microsoft Patch

I setup the registry key below for XP, here is what I’m setting up for Vista. Not 100% sure if it will work but I don’t see why it wouldn’t. It checks for netapi32.dll file version 6.0.6001.18157 which is what my computer reported as being installed after the update. Getting ready to test it right now.

(attached)

*Michael Stanclift*

*Network Analyst*

*Rockhurst University*

http://help.rockhurst.edu <http://help.rockhurst.edu/>
(816) 501-4231

*From:* Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] *On Behalf Of *bouchaiba
*Sent:* Friday, October 24, 2008 7:45 AM
*To:* [email protected]
*Subject:* Re: Microsoft Patch

Hi ,

Here are the registry keys  for XP

1-Windows XP Service Pack 2 and Windows XP Service Pack 3:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB958644\Filelist


2-Windows XP Professional x64 Edition and Windows XP Professional x64 Edition Service Pack 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP Version 2003\SP3\KB958644\Filelist

According to microsoft ,there are no reg keys for vista.



    -----Original Message-----
    From: Todd Joyce
    Sent: Oct 24, 2008 8:02 AM
    To: [email protected]
    Subject: Microsoft Patch

    Anyone figured out a check yet?

    Todd Joyce
    Radford University

-- Todd Joyce
    [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>

    Pain is the precursor of change


------------------------------------------------------------------------

Reply via email to