RDP session usign machine credentials against user credentials

FaneelChristian — Thu, 23 Jul 2020 17:26:29 GMT

Can someone please help me out with this issue i am trying to figure it out.

Ver: ISE 2.4

802.1x

Authentication: PEAP

Authorization: AD User / MSCHAPv2

When i login at workstation, policy works fine and correct DACL is applied and user gets appropriate network access. But when same user RDP into that machine with same credentials, authentication passed to ise is machine authentication against user credentials and so default DACL is applied, in our case we have set it to domain controller and internet only.

Is there anyone with same issue, if yes how can we have user access workstation with RDP session and policy works same way.

Thank you

Re: RDP session usign machine credentials against user credentials

Greg Gibbs — Thu, 23 Jul 2020 23:56:39 GMT

This is a design limitation in the Windows supplicant. See the following document for more information and suggestions.

Windows RDP and 802.1x Authentications

topic RDP session usign machine credentials against user credentials in Network Access Control

RDP session usign machine credentials against user credentials

Re: RDP session usign machine credentials against user credentials