cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

448
Views
0
Helpful
4
Replies
Highlighted
Beginner

AD Groups

Is there any limitations on the AD groups ISE can use/discover? I am not seeing the same groups in ISE as I do when look in Active Directory Users and Computers

ISE 2.2

4 REPLIES 4
Highlighted
Cisco Employee

There is a limit on the number of records that can be retrieved at a time.  In this case that number is 500

ADGroups500.PNG

Cisco Identity Services Engine Administrator Guide, Release 2.2 - Manage Users and External Identity Sources [Cisco Ide…

Highlighted
Cisco Employee

In case this is about the window [ Select Directory Groups ], that can only retrieve 500 groups per filter. Please adjust the filter to get to more specific groups of your choice.

If that is not the case, please provide more details. Or, engage Cisco TAC if not already done.

Highlighted
Beginner

Thanks

Its returning 393 groups so we're not hitting the limit.

As an example , in AD there is a group entitled "Test" It doesn't show up when in the Retrieve Groups list or any combination I use in the the search filter.

Highlighted

Is it a security group? What is the group scope? ISE does not deal with distribution groups.

Content for Community-Ad