802.1x Authentication

[Ben Bee]

I am trying to deny non domain PCs access to the domain. I’m done with configs but Having this issue with ISE. I noticed it denies non domain pcs access to the network but allows PCs not in the domain but has the computer certificate access to network. But I don’t want that, I want all non domain pcs not able to access the network even if you have the computer certificate.

[ahollifield]

Is your NAD configured in open mode or closed/low-impact mode?  What do you policies say?  What do the logs say?  

https://community.cisco.com/t5/security-documents/how-to-ask-the-community-for-help/ta-p/3704356