topic Configure WMI in Network Access Control https://community.cisco.com/t5/network-access-control/configure-wmi/m-p/3489078#M535852 <HTML><HEAD></HEAD><BODY><P>Can anyone please explain exactly what the "Configure WMI" button does in ISE 2.2? I am having to detail out this information for our server admins as we attempt to implement PassiveID. I have been working with TAC but they cannot explain the detail.</P><P></P><P>Also, do anyone know if the communication between the ISE and Active Directory is Synchronous, Asynchronous, or Semisynchronous?</P><P></P><P>Thanks for any information</P><P>Dave</P></BODY></HTML> Mon, 15 May 2017 13:13:09 GMT dmooregfb 2017-05-15T13:13:09Z Configure WMI https://community.cisco.com/t5/network-access-control/configure-wmi/m-p/3489078#M535852 <HTML><HEAD></HEAD><BODY><P>Can anyone please explain exactly what the "Configure WMI" button does in ISE 2.2? I am having to detail out this information for our server admins as we attempt to implement PassiveID. I have been working with TAC but they cannot explain the detail.</P><P></P><P>Also, do anyone know if the communication between the ISE and Active Directory is Synchronous, Asynchronous, or Semisynchronous?</P><P></P><P>Thanks for any information</P><P>Dave</P></BODY></HTML> Mon, 15 May 2017 13:13:09 GMT https://community.cisco.com/t5/network-access-control/configure-wmi/m-p/3489078#M535852 dmooregfb 2017-05-15T13:13:09Z Re: Configure WMI https://community.cisco.com/t5/network-access-control/configure-wmi/m-p/3489079#M535853 <HTML><HEAD></HEAD><BODY><P>Config WMI performs following tasks:</P><UL><LI>Sets the Windows Audit Policy</LI><LI>Sets permissions When AD User in the Domain Admin Group</LI><LI>Sets required Permissions When AD User Not in Domain Admin Group</LI><LI>Sets permissions to Use DCOM on the Domain Controller</LI><LI>Sets permissions for Access to WMI Root/CIMv2 Name Space</LI><LI>Grants access to the Security Event Log on the AD Domain Controller<BR /><BR /></LI></UL><P>Prior to "Config WMI", it was necessary to perform these changes manually as detailed here:</P><P><A href="http://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_01101.html#concept_8CFD8CF4072E4C7BBD01CED44D8FBC54" title="http://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_01101.html#concept_8CFD8CF4072E4C7BBD01CED44D8FBC54">Cisco Identity Services Engine Administrator Guide, Release 2.1 - Manage Users and External Identity Sources [Cisco Ide…</A></P><P></P><P>/Craig</P></BODY></HTML> Mon, 15 May 2017 13:46:52 GMT https://community.cisco.com/t5/network-access-control/configure-wmi/m-p/3489079#M535853 Craig Hyps 2017-05-15T13:46:52Z Re: Configure WMI https://community.cisco.com/t5/network-access-control/configure-wmi/m-p/3489080#M535854 <HTML><HEAD></HEAD><BODY><P>Adding to Craig's above, it also configures the Windows firewall to allow connections from ISE PSNs.</P><P>The communication would be classified as asynchronous, as the domain controllers do not wait for such logging to pass onto all the subscribers before grant or deny accesses.</P></BODY></HTML> Mon, 15 May 2017 14:33:09 GMT https://community.cisco.com/t5/network-access-control/configure-wmi/m-p/3489080#M535854 hslai 2017-05-15T14:33:09Z Re: Configure WMI https://community.cisco.com/t5/network-access-control/configure-wmi/m-p/3489081#M535855 <HTML><HEAD></HEAD><BODY><P>Craig, this is exactly what I was looking for.</P><P></P><P>Regards,</P><P>Dave</P></BODY></HTML> Mon, 15 May 2017 15:13:12 GMT https://community.cisco.com/t5/network-access-control/configure-wmi/m-p/3489081#M535855 dmooregfb 2017-05-15T15:13:12Z Re: Configure WMI https://community.cisco.com/t5/network-access-control/configure-wmi/m-p/3489082#M535857 <HTML><HEAD></HEAD><BODY><P>Thanks for this information as well!</P><P></P><P>Regards,</P><P>Dave</P></BODY></HTML> Mon, 15 May 2017 15:13:55 GMT https://community.cisco.com/t5/network-access-control/configure-wmi/m-p/3489082#M535857 dmooregfb 2017-05-15T15:13:55Z