Cisco ISE 2.4 & Windows 2016 KB4537806

[Scottdavison]

Hi All,

I just came across a problem at work today with ISE 2.4 Patch 3 and a Windows 2016 Domain controller with the following patch installed KB4537806. It stopped ISE for using AD authentication both for admin console logins and devices been authenticating onto the network wired and wireless. Using internal admin account I checked the external sources and all seemed to be in working order. Once I uninstalled the Windows Patch and rebooted the DC all return to normal.

I known the ISE version is out of date but we are currently migrating ISE to a new ISE platform both hardware and software.

Anybody else had these issues?

[Colby LeMaire]

I just read through the KB and didn't see any known issues that would affect ISE.  It actually appears to address some issues that could have caused previous problems.  When you installed the patch, did you reboot the server?  Or was it installed in place and kept on running?

[Scottdavison]

The server was reboot after the patch had been installed. I'm going to download the logs today and have a closer look.