end machines not loading GPO

[Ibrahim Jamil Jamus]

Hi All,

currently we have GPO to set the desktop background in the users' machines. once we deployed ISE, now the GPO is not getting applied.

ISE 2.0 is deployed to authenticate the users as well as their machines using EAP-FAST (chaining) with Anyconnect NAM client. I've noticed after a lot of tests, that the issue is not the ISE itself. the issue is the NAM client installed in machines. even if I connect to port on a normal port on the switch and it is not configured for AAA, and the NAM client is enabled in the client's machine, the GPO doesn't get applied too. the issue is happening with almost all the uses.

thanks in advance :)

[nspasov]

Hello Ibrahim-

Two questions for you:

1. What version of AnyConnect do you have deployed?

2. Do you have "Start Before Logon" enabled?

For more info check the link below:

http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/configure-nam.html

Thank you for rating helpful posts!