topic Re: problem with ISE2.3 and AD 2016 WMI integration in Network Access Control https://community.cisco.com/t5/network-access-control/problem-with-ise2-3-and-ad-2016-wmi-integration/m-p/3587467#M511729 <HTML><HEAD></HEAD><BODY><P><SPAN style="color: #000000; font-family: Calibri, sans-serif; font-size: 15px;">I'd like to know if those changes would be done differently in a multi Domain Controllers environment.</SPAN></P><P><SPAN style="color: #000000; font-family: Calibri, sans-serif; font-size: 15px;"><BR /></SPAN></P><P><SPAN style="color: #000000; font-family: Calibri, sans-serif; font-size: 15px;">Thanks!</SPAN></P></BODY></HTML> Wed, 18 Apr 2018 01:45:17 GMT lekang 2018-04-18T01:45:17Z problem with ISE2.3 and AD 2016 WMI integration https://community.cisco.com/t5/network-access-control/problem-with-ise2-3-and-ad-2016-wmi-integration/m-p/3587463#M511721 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I want to integrate ISE 2.3 with Windows AD 2016 to enable passiveID in the network.</P><P></P><P>Configuration of DC is OK, but when I click on on the Test button I get error message.</P><P></P><P>Do you know what can be a problem?</P><P></P><P>BR Milan</P></BODY></HTML> Thu, 08 Mar 2018 10:01:41 GMT https://community.cisco.com/t5/network-access-control/problem-with-ise2-3-and-ad-2016-wmi-integration/m-p/3587463#M511721 m.markocevic 2018-03-08T10:01:41Z Re: problem with ISE2.3 and AD 2016 WMI integration https://community.cisco.com/t5/network-access-control/problem-with-ise2-3-and-ad-2016-wmi-integration/m-p/3587464#M511722 <HTML><HEAD></HEAD><BODY><P>Try CN name instead of email address of administrator</P></BODY></HTML> Thu, 08 Mar 2018 10:07:54 GMT https://community.cisco.com/t5/network-access-control/problem-with-ise2-3-and-ad-2016-wmi-integration/m-p/3587464#M511722 afahmy 2018-03-08T10:07:54Z Re: problem with ISE2.3 and AD 2016 WMI integration https://community.cisco.com/t5/network-access-control/problem-with-ise2-3-and-ad-2016-wmi-integration/m-p/3587465#M511724 <HTML><HEAD></HEAD><BODY><P>I'm not using email. Administrator CN is used.<IMG alt="username.png" class="image-1 jive-image" src="https://community.cisco.com/legacyfs/online/fusion/115815_username.png" style="height: 312px; width: 620px;" />&nbsp; </P></BODY></HTML> Thu, 08 Mar 2018 10:22:59 GMT https://community.cisco.com/t5/network-access-control/problem-with-ise2-3-and-ad-2016-wmi-integration/m-p/3587465#M511724 m.markocevic 2018-03-08T10:22:59Z Re: problem with ISE2.3 and AD 2016 WMI integration https://community.cisco.com/t5/network-access-control/problem-with-ise2-3-and-ad-2016-wmi-integration/m-p/3587466#M511726 <HTML><HEAD></HEAD><BODY><P>If there are any firewalls between ISE and DC, please ensure ISE allowed to connect to DC on any ports. See also <A href="https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_01110.html#reference_8DC463597A644A5C9CF5D582B77BB24F">Prerequisites for Integrating Active Directory and Cisco ISE</A></P><P></P><P>You may also check <A href="https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_01110.html#id_ADReqsIntroDenali" style="font-family: CiscoSans, Arial, sans-serif; font-size: 14px; color: #6f53bc;">Active Directory Requirements to Support Easy Connect and Passive Identity services</A></P><P></P><P>Additionally, turn DEBUG on passiveid and watch the debug log via CLI "show logging app passiveid-wmi.log tail". Attached is a sample log file.</P><P></P><P>PS: I tried it myself and ISE worked fine with Windows Server 2016 (Updated Feb 2018) Standard with Desktop Experience.</P></BODY></HTML> Tue, 13 Mar 2018 15:00:42 GMT https://community.cisco.com/t5/network-access-control/problem-with-ise2-3-and-ad-2016-wmi-integration/m-p/3587466#M511726 hslai 2018-03-13T15:00:42Z Re: problem with ISE2.3 and AD 2016 WMI integration https://community.cisco.com/t5/network-access-control/problem-with-ise2-3-and-ad-2016-wmi-integration/m-p/3587467#M511729 <HTML><HEAD></HEAD><BODY><P><SPAN style="color: #000000; font-family: Calibri, sans-serif; font-size: 15px;">I'd like to know if those changes would be done differently in a multi Domain Controllers environment.</SPAN></P><P><SPAN style="color: #000000; font-family: Calibri, sans-serif; font-size: 15px;"><BR /></SPAN></P><P><SPAN style="color: #000000; font-family: Calibri, sans-serif; font-size: 15px;">Thanks!</SPAN></P></BODY></HTML> Wed, 18 Apr 2018 01:45:17 GMT https://community.cisco.com/t5/network-access-control/problem-with-ise2-3-and-ad-2016-wmi-integration/m-p/3587467#M511729 lekang 2018-04-18T01:45:17Z