ISE 2.0 Identity Mapping with read-only DC

[lekang]

Hi there, I have a customer who is running ISE 2.0-306 and wanting to setup Identity Mapping with Read-only Domain Controller (RODC) at the branch. Customer is aware of changes required on the DC for ID mapping to work, are there any caveats/limitation for ID mappings to work with RODC?

Regards, CK

[hslai · Accepted solution]

I see no issue, as long as the DC allowing the configured user read access to the windows events and WMI permissions.