Message-ID: <8C161805B39544E39A872F069F6DBDA8@CDCHOME>
From: "Christopher D. Clausen" <cclausen@acm.org>
To: <rt@krbdev.mit.edu>
References: <rt-5462-25559.2.6713544555421@krbdev.mit.edu>
Subject: Re: [krbdev.mit.edu #5462] Vista no longer returns enctype 0 forunavailable session keys
Date: Mon, 15 Oct 2007 22:25:59 -0500
RT-Send-Cc: 
Content-Length: 1148

mayer@ntp.isc.org via RT <rt@krbdev.mit.edu> wrote:
> Jeffrey Altman via RT wrote:
>> [jaltman - Tue Sep  4 14:39:20 2007]:
>>> Vista SP1 beta will be available to select testers within the next
>>> two weeks.
>>
>> Vista SP1 Beta 1 does not contain any changes in this area.
>>
>> The open issue with Microsoft is SRQ070322604363 and the hot fix for
>> Vista RTM is KB 942219.
>>
>> There is no runtime test that can be performed to determine if the
>> hot fix is applied.  When the hotfix becomes widely available we are
>> going to have to use either a Windows build number test or attempt to
>> enumerate the installed update list.
>
> Historically, Hotfixes ended up creating a folder in the Windows
> directory called $NtUninstallKB873339$. Is that no longer true with
> Vista? I could have sworn that it also added it to the registry but I
> can't find where.

One should not assume those exist.  I for one delete such directories to 
save disk space before cloning systems.

I would assume that it is possible to check the version number of 
Kerberos.dll and make sure it is equal to or newer than the version in 
the KB article.

<<CDC