When running an HI check you receive the message “Fail to execute Host Integrity check Error Type: 0x00200001, Error Code: 0x000000FF”.

Products

• Network Access Control

Issue/Introduction

When running an HI check you receive the message “Fail to execute Host Integrity check Error Type: 0x00200001, Error Code: 0x000000FF”.

 

When running an HI check you receive the message “Fail to execute Host Integrity check

Error Type: 0x00200001, Error Code: 0x000000FF” (fig1).

(fig1)

 

Cause

This appears if you have an HI check that is relying on a service to be running to perform the check and the service is not running (disabled).

Resolution

For the purposes of this document we will focus on the firewall check on a Windows 7 system.

The Firewall check in the HI policy relies on the Windows Firewall Service to be running (on Windows 7 and 2008 Server systems) to perform the check, if the Windows Firewall Service is disabled or not running the HI will not complete and return the above error (fig1).

 

 

Solution:

Restart the Windows Firewall Service on the system affected by this issue. Please remember the Firewall does not have to be enabled to solve the issue however the Service must to be running.

Below are the events from the windows event viewer during the HI check when the Windows firewall Service is not running (started) or disabled.

Error

 

Faulting application name: cscript.exe, version: 5.8.7600.16385, time stamp: 0x4a5bca2a

Faulting module name: FirewallAPI.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdefd

Exception code: 0xc0000005

Fault offset: 0x0000000000043127

Faulting process id: 0x630

Faulting application start time: 0x01ce979405188ed8

Faulting application path: C:\Windows\system32\cscript.exe

Faulting module path: C:\Windows\system32\FirewallAPI.dll

Report Id: 43160881-0387-11e3-9121-0050560512ef

------------------------------------------------------------------

 

Information

 

Fault bucket , type 0

Event Name: APPCRASH

Response: Not available

Cab Id: 0

 

Problem signature:

P1: cscript.exe

P2: 5.8.7600.16385

P3: 4a5bca2a

P4: FirewallAPI.dll

P5: 6.1.7600.16385

P6: 4a5bdefd

P7: c0000005

P8: 0000000000043127

P9:

P10:

 

Attached files:

 

These files may be available here:

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_cscript.exe_df75c7547fcead1cb6f29177241c5b031e9aa_03c08dcf

 

Analysis symbol:

Rechecking for solution: 0

Report Id: 43160881-0387-11e3-9121-0050560512ef

Report Status: 4

 

 

Applies To

Win 7

Win 2008 sever