cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1094
Views
0
Helpful
4
Replies

AD Groups

networkhelp1
Level 1
Level 1

Is there any limitations on the AD groups ISE can use/discover? I am not seeing the same groups in ISE as I do when look in Active Directory Users and Computers

ISE 2.2

4 Replies 4

Charlie Moreton
Cisco Employee
Cisco Employee

There is a limit on the number of records that can be retrieved at a time.  In this case that number is 500

ADGroups500.PNG

Cisco Identity Services Engine Administrator Guide, Release 2.2 - Manage Users and External Identity Sources [Cisco Ide…

hslai
Cisco Employee
Cisco Employee

In case this is about the window [ Select Directory Groups ], that can only retrieve 500 groups per filter. Please adjust the filter to get to more specific groups of your choice.

If that is not the case, please provide more details. Or, engage Cisco TAC if not already done.

networkhelp1
Level 1
Level 1

Thanks

Its returning 393 groups so we're not hitting the limit.

As an example , in AD there is a group entitled "Test" It doesn't show up when in the Retrieve Groups list or any combination I use in the the search filter.

Is it a security group? What is the group scope? ISE does not deal with distribution groups.