topic Re: AD Groups in Network Access Control https://community.cisco.com/t5/network-access-control/ad-groups/m-p/3448837#M521367 <HTML><HEAD></HEAD><BODY><P>Thanks </P><P>Its returning 393 groups so we're not hitting the limit.</P><P>As an example , in AD there is a group entitled "Test" It doesn't show up when in the Retrieve Groups list or any combination I use in the the search filter.</P></BODY></HTML> Thu, 21 Sep 2017 19:15:55 GMT networkhelp1 2017-09-21T19:15:55Z AD Groups https://community.cisco.com/t5/network-access-control/ad-groups/m-p/3448834#M521358 <HTML><HEAD></HEAD><BODY><P>Is there any limitations on the AD groups ISE can use/discover? I am not seeing the same groups in ISE as I do when look in Active Directory Users and Computers </P><P>ISE 2.2</P></BODY></HTML> Thu, 21 Sep 2017 18:03:10 GMT https://community.cisco.com/t5/network-access-control/ad-groups/m-p/3448834#M521358 networkhelp1 2017-09-21T18:03:10Z Re: AD Groups https://community.cisco.com/t5/network-access-control/ad-groups/m-p/3448835#M521362 <HTML><HEAD></HEAD><BODY><P>There is a limit on the number of records that can be retrieved at a time.&nbsp; In this case that number is 500</P><P><IMG __jive_id="111469" alt="ADGroups500.PNG" class="image-1 jive-image" height="27" src="https://community.cisco.com/legacyfs/online/fusion/111469_ADGroups500.PNG" style="height: 26.6833px; width: 689px;" width="689" /></P><P></P><P><A href="https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_0100101.html#ID687" title="https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_0100101.html#ID687">Cisco Identity Services Engine Administrator Guide, Release 2.2 - Manage Users and External Identity Sources [Cisco Ide…</A></P></BODY></HTML> Thu, 21 Sep 2017 18:38:26 GMT https://community.cisco.com/t5/network-access-control/ad-groups/m-p/3448835#M521362 Charlie Moreton 2017-09-21T18:38:26Z Re: AD Groups https://community.cisco.com/t5/network-access-control/ad-groups/m-p/3448836#M521364 <HTML><HEAD></HEAD><BODY><P>In case this is about the window [ Select Directory Groups ], that can only retrieve 500 groups per filter. Please adjust the filter to get to more specific groups of your choice.</P><P></P><P>If that is not the case, please provide more details. Or, engage Cisco TAC if not already done.</P></BODY></HTML> Thu, 21 Sep 2017 18:43:17 GMT https://community.cisco.com/t5/network-access-control/ad-groups/m-p/3448836#M521364 hslai 2017-09-21T18:43:17Z Re: AD Groups https://community.cisco.com/t5/network-access-control/ad-groups/m-p/3448837#M521367 <HTML><HEAD></HEAD><BODY><P>Thanks </P><P>Its returning 393 groups so we're not hitting the limit.</P><P>As an example , in AD there is a group entitled "Test" It doesn't show up when in the Retrieve Groups list or any combination I use in the the search filter.</P></BODY></HTML> Thu, 21 Sep 2017 19:15:55 GMT https://community.cisco.com/t5/network-access-control/ad-groups/m-p/3448837#M521367 networkhelp1 2017-09-21T19:15:55Z Re: AD Groups https://community.cisco.com/t5/network-access-control/ad-groups/m-p/3448838#M521371 <HTML><HEAD></HEAD><BODY><P>Is it a security group? What is the group scope? ISE does not deal with distribution groups.</P></BODY></HTML> Thu, 21 Sep 2017 19:26:03 GMT https://community.cisco.com/t5/network-access-control/ad-groups/m-p/3448838#M521371 hslai 2017-09-21T19:26:03Z