topic Condition to check Domain Machine in Network Access Control

Condition to check Domain Machine

danielnunes — Mon, 11 Mar 2019 03:26:14 GMT

Hi guys,

please, wich is the best solution to know if a machine is member of the Microsoft AD Domain?

I am looking for something in ISE conditions but i couldn't see anything related.

thanks a lot

Jatin Katyal — Wed, 15 May 2013 16:38:43 GMT

do you only need to perform and match machine authentication ot machine plus user authentication from the MS ad domain.

The below listed screen shot is good example to understand machine and user. This is called machine access restriction.

If you only looking for machine authentication that we have to use condition with systemuser equals to host/

Jatin Katyal

- Do rate helpful posts -

danielnunes — Wed, 15 May 2013 16:58:11 GMT

Hi Jatin,

thanks a lot for your reply!

I'll test this and i'll send the results.

thanks

danielnunes — Wed, 15 May 2013 18:17:21 GMT

Hi Jatin,

please, could you answer me a question which i am a litlle confused about it?

Why does the Machine AD Domain verification isn't on Posture verification?

Because can i see the Machine AD verification like a posture requeriment? isn't it?

thanks

askhuran — Mon, 20 May 2013 11:38:41 GMT

This can be accomplished in 2 ways:

Check whether the machine was authenticated. I agree with Jatin, he has provided helpful information

For more information follow this location

Configure Profiling condition based on IP:FQDN attribte CONTAINS "ad-domain.com"

Review the following link: