Just tested in Vista and moved into production. The check that I used 
verifies that netapi32.dll is later than 6.0.6001.18156

--
Cal A. Krzywiec
Network Engineer
The University of Scranton
Phone: (570) 941-6748
Email: [log in to unmask]



Mary-Ellen Ide wrote:
>
> I have created the rule for Vista and XP, and set the requirement up 
> as an “audit”.
>
> I patched Vista and it failed the audit check (see attachment).  Has 
> anyone been able to get this working with Vista?  I checked the 
> netapi32.dll and it is version  6.0.6001.18157. 
>
> I am in the process of patching Win XP and will then test that one…..
>
>  
>
> Mary Ide
>
> Internet Security Engineer
>
> Johnson & Wales University
>
> SANS GCIH #1794
>
> SANS GWAS #1728
>
> [log in to unmask] <BLOCKED::mailto:[log in to unmask]>
>
>  
>
> *From:* Cisco Clean Access Users and Administrators 
> [mailto:[log in to unmask]] *On Behalf Of *Stanclift, Michael
> *Sent:* Friday, October 24, 2008 10:28 AM
> *To:* [log in to unmask]
> *Subject:* Re: Microsoft Patch
>
>  
>
> I setup the registry key below for XP, here is what I’m setting up for 
> Vista. Not 100% sure if it will work but I don’t see why it wouldn’t. 
> It checks for netapi32.dll file version 6.0.6001.18157 which is what 
> my computer reported as being installed after the update. Getting 
> ready to test it right now.
>
>  
>
> (attached)
>
>  
>
> *Michael Stanclift*
>
> *Network Analyst*
>
> *Rockhurst University*
>
>  
>
> http://help.rockhurst.edu <http://help.rockhurst.edu/>
> (816) 501-4231
>
>  
>
> *From:* Cisco Clean Access Users and Administrators 
> [mailto:[log in to unmask]] *On Behalf Of *bouchaiba
> *Sent:* Friday, October 24, 2008 7:45 AM
> *To:* [log in to unmask]
> *Subject:* Re: Microsoft Patch
>
>  
>
> Hi ,
>
>  
>
> Here are the registry keys  for XP
>
> 1-Windows XP Service Pack 2 and Windows XP Service Pack 3:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows 
> XP\SP4\KB958644\Filelist
>
>
> 2-Windows XP Professional x64 Edition and Windows XP Professional x64 
> Edition Service Pack 2:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP Version 
> 2003\SP3\KB958644\Filelist
>
> According to microsoft ,there are no reg keys for vista.
>
>
>
>  
>
>     -----Original Message-----
>     From: Todd Joyce
>     Sent: Oct 24, 2008 8:02 AM
>     To: [log in to unmask]
>     Subject: Microsoft Patch
>
>     Anyone figured out a check yet?
>
>     Todd Joyce
>     Radford University
>
>     -- 
>     Todd Joyce
>     [log in to unmask] <mailto:[log in to unmask]>
>
>     Pain is the precursor of change
>
>
> ------------------------------------------------------------------------
>