Using ISE posture to check windows version and/or patch level

[cgarringer]

I have been asked by our security group to see if it is possible to check for minimum Windows version on a PC.    This is for contractor PCs so we have no control over the PC.     Also can we check the same group of PCs for security patches using ISE posture?

[balaji.bandi]

If the domain joined yes you can check, if this is guest PC YES / NO depends on control over that device.