topic Re: Cisco ISE and MS AD Domain User Authentciation in Network Access Control

Cisco ISE and MS AD Domain User Authentciation

uni1389 — Fri, 21 Mar 2025 08:31:06 GMT

Hello Guys,

Being new to cisco ISE am trying to authenticate windows PC using DOT1X with following test cases:-

01. By using local PC Windows11 login credentials and ISE Internal users am able to authenticate. Everything is okay

01. By using local PC Windows11 login credentials and ISE MS AD User am able to authenticate. Everything is okay

03. but am not able to authenticate user after login to PC with Windows domain users . How can i do it . Is there any reference to implement this test case.

Regards

Uni

Re: Cisco ISE and MS AD Domain User Authentciation

Mark Elsen — Fri, 21 Mar 2025 09:49:40 GMT

- For 03 : Check the ISE live logs when trying
Have a look at https://www.mixednetworks.com/cisco-ise/cisco-ise-join-active-directory/

Re: Cisco ISE and MS AD Domain User Authentciation

uni1389 — Fri, 21 Mar 2025 13:47:08 GMT

Thanks this part has been done , but still not able to authenticate domain users.

Re: Cisco ISE and MS AD Domain User Authentciation

Scott Fella — Fri, 21 Mar 2025 14:06:20 GMT

Take a look at your policies and the live logs to see what policy its hitting. That way you can at least determine if you are hitting the right policy or not. That will give you information in which you might need to modify an existing rule or possibly re-order your policy.
You can also test the user account with a password or just doing a lookup to verify that ISE can query the username correctly. I don't know where you are at with your testing.

Re: Cisco ISE and MS AD Domain User Authentciation

Mark Elsen — Fri, 21 Mar 2025 14:21:26 GMT

- @uni1389 Not sure what part you are talking about ?