Resolved! ISE AD-Host-Exists Profiling
I have a profile condition setup so that if the AD-Host-Exists, then add some points and possibly profile a device as a domain device. I have an iphone that does not AD-Host-Exists and it is matching the profile. Running ise 2.3. Any ideas?