WGA Service Not Available

I provide tech support for students living in the dorms at Cal Poly,
San Luis Obispo. We have a security system in place that prevents users
access to the Internet without them passing certain security checks.
One of our checks ensures that users have installed all available
Microsoft Critical Updates. We give users "temporary" access to browse
certain websites to fix their computer prior to being given full access
if they fail a security check.

Our system is configured to allow users access to any website ending
with the following domain names:
microsoft.com
windowsupdate.com
update.microsoft.com
fupdate.microsoft.com

Students are due back in about a month, so we started to retest the
system to ensure everything worked correctly. An interesting problem we
ran into is that the Windows Genuine Advantage Validation tool will not
validate a computer that is being restricted access to only the above
domains. If we create a temporary "pass-through" for a user giving them
complete access to the web, the validation tool works correctly.

So our assumption is that our system is blocking a required IP address
or domain name required by the WGA Validation tool. Our tech team was
interested to discover if anyone knows of any IP addresses or domains
required by WGA that aren't listed above.

Kyle // SeniorQuico

AFAIK *.microsoft.com
and *.windowsupdate.com

covers all the relevant domains

Jon

"SeniorQuico" <> wrote in message
news: oups.com...
>I provide tech support for students living in the dorms at Cal Poly,
> San Luis Obispo. We have a security system in place that prevents users
> access to the Internet without them passing certain security checks.
> One of our checks ensures that users have installed all available
> Microsoft Critical Updates. We give users "temporary" access to browse
> certain websites to fix their computer prior to being given full access
> if they fail a security check.
>
> Our system is configured to allow users access to any website ending
> with the following domain names:
> microsoft.com
> windowsupdate.com
> update.microsoft.com
> fupdate.microsoft.com
>
> Students are due back in about a month, so we started to retest the
> system to ensure everything worked correctly. An interesting problem we
> ran into is that the Windows Genuine Advantage Validation tool will not
> validate a computer that is being restricted access to only the above
> domains. If we create a temporary "pass-through" for a user giving them
> complete access to the web, the validation tool works correctly.
>
> So our assumption is that our system is blocking a required IP address
> or domain name required by the WGA Validation tool. Our tech team was
> interested to discover if anyone knows of any IP addresses or domains
> required by WGA that aren't listed above.
>
> Kyle // SeniorQuico
>