Does Native Supplicant Provisioning require admin rights on local machine?

[Allen P Chen]

To support wired/wireless BYOD for Windows and Macs, are admin rights needed for the logged in user on the local machine to accept the configuration changes in the wired/wireless profiles distributed by Native Supplicant Profile? 

I've looked in ISE configuration guides, Cisco Live sessions, ISE techtorials, etc, but I could not find any mention of whether admin rights are needed on the local machine or not.

Thanks in advance. 

[howon · Accepted solution]

Yes, it requires admin rights to the device for it to work as it requires changes to the certificate store (Regardless of using TLS or PEAP), modifications to network settings, and also starting of supplicant on Windows wired interface if used.

[Allen P Chen]

Thank you Hosuk for the reply, much appreciated!

[FELIX MEIXNER]

Hosuk, can you specify what exact Admin rights are needed on the Windows (7/10) machines that need to be onboarded?