topic Re: ISE - AD integration and Admin Service Account in Network Access Control

ISE - AD integration and Admin Service Account

cpaquet — Wed, 09 Dec 2020 01:25:31 GMT

What are the privileges that the Admin Account needs to have, after ISE has been integrated with AD? In other words: what are the minimum settings that the Service account, used to log in AD and create the ISE-AD integration, needs to have to continue working (querying AD) after the initial integration, to authenticate 1X or CWA sessions, and query for group membership to work?

Thank you for your time.

Re: ISE - AD integration and Admin Service Account

Mark Elsen — Wed, 09 Dec 2020 08:38:26 GMT

- Check if this can give some initial info(s) :

https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/ise_active_directory_integration/b_ISE_AD_integration_2x.html#reference_8DC463597A644A5C9CF5D582B77BB24F

Re: ISE - AD integration and Admin Service Account

cpaquet — Wed, 09 Dec 2020 15:00:47 GMT

Okay, I will go on AD and check on those.