Integration of ISE-PIC with AD, access denied

[Bledian]

Hello community,

I'm trying to integrate ISE-PIC with AD using  WMI, user is domain admin so it has already all the permissions.

Error: access denied please check credentials, permissions and configure the permissions windows machine for wmi access.

Is there any extra config I need to do in active directory?

Best regards, 

BR

[Rodrigo Diaz · Accepted solution]

hello @Bledian  it's very likely that the integration is not working due to the following bug CSCvz97194, this is also been documented on the Microsoft side due to the DCOM hardening that took place few days ago https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-windows-dcom-server-security-feature-bypass-cve-2021-26414-f1400b52-c141-43d2-941e-37ed901c769c  , one thing that you can attempt is to configure another provider such as MS-RPC more info in this link https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/216512-configure-evt-based-identity-services-en.html . 

Kindly rate and let me know if that helped you .