This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC!
We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Is there any limitations on the AD groups ISE can use/discover? I am not seeing the same groups in ISE as I do when look in Active Directory Users and Computers
ISE 2.2
There is a limit on the number of records that can be retrieved at a time. In this case that number is 500
In case this is about the window [ Select Directory Groups ], that can only retrieve 500 groups per filter. Please adjust the filter to get to more specific groups of your choice.
If that is not the case, please provide more details. Or, engage Cisco TAC if not already done.
Thanks
Its returning 393 groups so we're not hitting the limit.
As an example , in AD there is a group entitled "Test" It doesn't show up when in the Retrieve Groups list or any combination I use in the the search filter.
Is it a security group? What is the group scope? ISE does not deal with distribution groups.