11-10-2010 10:50 AM - edited 02-21-2020 04:09 AM
I have a question about the WINXP rules in the NAC server and more specifically, if a rule reports a failing, but it's part of a ! rule, does that mean it's passing? For example:
&(!pc_Windows_ehkeyctl|pc_XP_MCE_KB973768_MS09-037) (red denotes failure)
The NAC reports this as a failed check:
pc_Windows_ehkeyctl, File Check [$SYSTEM_ROOT\ehome\ehkeyctl.dll exists ]
Is it failing because it finds the file and there is a negation on the rule?
What about this:
&(!pc_XP_2115168_MS10-052_FileChk|pc_XP_2115168_MS10-052)
The first part reports as passing, and the second reports as failing...but by all logic, this part of the rule should pass because the first part passed? Does that sound correct?
Thanks!
--Gavin Budd
Solved! Go to Solution.
11-10-2010 02:00 PM
It's actually reporting a check failing - and in many cases this is expected (and confusing!). For instance, with the pre-configured Windows checks, if it's a 32-bit client you will see it fail the 64-bit check.
Same thing with your second example check
&(!pc_XP_2115168_MS10-052_FileChk|pc_XP_2115168_MS10-052)
We expect it to either not pass the first check or pass the second check - but one of those checks will show as failed. Clear as mud?
11-10-2010 02:00 PM
It's actually reporting a check failing - and in many cases this is expected (and confusing!). For instance, with the pre-configured Windows checks, if it's a 32-bit client you will see it fail the 64-bit check.
Same thing with your second example check
&(!pc_XP_2115168_MS10-052_FileChk|pc_XP_2115168_MS10-052)
We expect it to either not pass the first check or pass the second check - but one of those checks will show as failed. Clear as mud?
11-10-2010 02:15 PM
Yes, that what TAC just told me. I need to fail the first check (it's passing and showing up as passing) or pass the second (it's failing). The reporting of the passes and failures are of the checks themselves and don't take the negation (!) into consideration.
Thanks!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide