Active Directory user is always blocked by Cisco ISE

[anxo.darosa]

Good morning.

I have a user who is always blocked his AD account.

I looked for information on the Windows Event Viewer and I found that the problem is with the Cisco ISE.

I am connected to the Cisco ISE Logs, and I viewed that the authentication is failed.

How can I solve this issue?

[Rob Ingram]

@anxo.darosa what is the information in the individual ISE Live Logs?

How is the user's supplicant configured, does it pass through the logged in user credentials or does the user enter the username/password manually?

[anxo.darosa]

@Rob Ingram thank for the quick answer.

The user has to enter the username and password manually to connect to the VPN through Cisco Anyconnect.

[Rob Ingram]

@anxo.darosa ok but what detailed information is contained in the live log to indicate the problem?

It just looks like the account is locked out, possibly because the user is entering an incorrect password? I assume the other users work ok?