topic Access Is Denied in Network Access Control https://community.cisco.com/t5/network-access-control/access-is-denied/m-p/3444936#M528048 <HTML><HEAD></HEAD><BODY><P><SPAN lang="en">Team....<BR /><BR /><SPAN>I could help, I'm trying to integrate an ISE with the Active Directory.</SPAN><BR /><BR /><SPAN>Do you know what type of account (User) should I ask for an Active Directory administrator?</SPAN></SPAN></P><P><SPAN lang="en"><SPAN><BR /></SPAN></SPAN></P><P><SPAN lang="en"><SPAN><SPAN lang="en"><SPAN><STRONG>Is there and / or is there a Cisco ISE link that explains in detail what should be done in the Active Directory for the account I need?</STRONG></SPAN></SPAN></SPAN></SPAN></P><P><SPAN lang="en"><SPAN><BR /></SPAN></SPAN></P><P><SPAN lang="en"><SPAN><IMG alt="" class="image-1 jive-image" src="https://community.cisco.com/legacyfs/online/fusion/109886_pastedImage_0.png" style="max-width: 1200px; max-height: 900px;" /></SPAN></SPAN></P><P><SPAN lang="en"><SPAN><BR /></SPAN></SPAN></P><P><SPAN lang="en"><SPAN>Best Regards<BR /></SPAN></SPAN></P><P></P><P><SPAN lang="en"><SPAN><BR /></SPAN></SPAN></P><P><SPAN lang="en"><SPAN><A href="https://community.cisco.com/space/5301">Identity Services Engine (ISE)</A><BR /></SPAN></SPAN></P></BODY></HTML> Wed, 02 Aug 2017 00:17:07 GMT jh840bjjhj 2017-08-02T00:17:07Z Access Is Denied https://community.cisco.com/t5/network-access-control/access-is-denied/m-p/3444936#M528048 <HTML><HEAD></HEAD><BODY><P><SPAN lang="en">Team....<BR /><BR /><SPAN>I could help, I'm trying to integrate an ISE with the Active Directory.</SPAN><BR /><BR /><SPAN>Do you know what type of account (User) should I ask for an Active Directory administrator?</SPAN></SPAN></P><P><SPAN lang="en"><SPAN><BR /></SPAN></SPAN></P><P><SPAN lang="en"><SPAN><SPAN lang="en"><SPAN><STRONG>Is there and / or is there a Cisco ISE link that explains in detail what should be done in the Active Directory for the account I need?</STRONG></SPAN></SPAN></SPAN></SPAN></P><P><SPAN lang="en"><SPAN><BR /></SPAN></SPAN></P><P><SPAN lang="en"><SPAN><IMG alt="" class="image-1 jive-image" src="https://community.cisco.com/legacyfs/online/fusion/109886_pastedImage_0.png" style="max-width: 1200px; max-height: 900px;" /></SPAN></SPAN></P><P><SPAN lang="en"><SPAN><BR /></SPAN></SPAN></P><P><SPAN lang="en"><SPAN>Best Regards<BR /></SPAN></SPAN></P><P></P><P><SPAN lang="en"><SPAN><BR /></SPAN></SPAN></P><P><SPAN lang="en"><SPAN><A href="https://community.cisco.com/space/5301">Identity Services Engine (ISE)</A><BR /></SPAN></SPAN></P></BODY></HTML> Wed, 02 Aug 2017 00:17:07 GMT https://community.cisco.com/t5/network-access-control/access-is-denied/m-p/3444936#M528048 jh840bjjhj 2017-08-02T00:17:07Z Re: Access Is Denied https://community.cisco.com/t5/network-access-control/access-is-denied/m-p/3444937#M528049 <HTML><HEAD></HEAD><BODY><P>See <A href="http://www.cisco.com/c/en/us/td/docs/security/ise/2-3/ise_active_directory_integration/b_ISE_AD_integration_2x.html#reference_F19556CAD5C949B58DF89334E2C6255D">Active Directory Account Permissions Required for Performing Various Operations</A></P><P></P><P>You may either give the Active Directory administrator access to your ISE admin web UI and join the ISE to the AD for you, or follow something similar to this blog <A href="http://mgitservice.blogspot.com/2014/08/the-following-user-or-group-can-join.html">The MG IT SERVICE blog: "The following user or group can join this computer to a domain" using Powershell</A>.</P></BODY></HTML> Wed, 02 Aug 2017 00:21:32 GMT https://community.cisco.com/t5/network-access-control/access-is-denied/m-p/3444937#M528049 hslai 2017-08-02T00:21:32Z