When running an HI check you receive the message “Fail to execute Host Integrity check Error Type: 0x00200001, Error Code: 0x000000FF”.
When running an HI check you receive the message “Fail to execute Host Integrity check Error Type: 0x00200001, Error Code: 0x000000FF”.
When running an HI check you receive the message “Fail to execute Host Integrity check
Error Type: 0x00200001, Error Code: 0x000000FF” (fig1).
(fig1)
This appears if you have an HI check that is relying on a service to be running to perform the check and the service is not running (disabled).
For the purposes of this document we will focus on the firewall check on a Windows 7 system.
The Firewall check in the HI policy relies on the Windows Firewall Service to be running (on Windows 7 and 2008 Server systems) to perform the check, if the Windows Firewall Service is disabled or not running the HI will not complete and return the above error (fig1).
Solution:
Restart the Windows Firewall Service on the system affected by this issue. Please remember the Firewall does not have to be enabled to solve the issue however the Service must to be running.
Below are the events from the windows event viewer during the HI check when the Windows firewall Service is not running (started) or disabled.
Error
Faulting application name: cscript.exe, version: 5.8.7600.16385, time stamp: 0x4a5bca2a
Faulting module name: FirewallAPI.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdefd
Exception code: 0xc0000005
Fault offset: 0x0000000000043127
Faulting process id: 0x630
Faulting application start time: 0x01ce979405188ed8
Faulting application path: C:\Windows\system32\cscript.exe
Faulting module path: C:\Windows\system32\FirewallAPI.dll
Report Id: 43160881-0387-11e3-9121-0050560512ef
------------------------------------------------------------------
Information
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: cscript.exe
P2: 5.8.7600.16385
P3: 4a5bca2a
P4: FirewallAPI.dll
P5: 6.1.7600.16385
P6: 4a5bdefd
P7: c0000005
P8: 0000000000043127
P9:
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_cscript.exe_df75c7547fcead1cb6f29177241c5b031e9aa_03c08dcf
Analysis symbol:
Rechecking for solution: 0
Report Id: 43160881-0387-11e3-9121-0050560512ef
Report Status: 4
Applies To
Win 7
Win 2008 sever