ISE 2.2 - Active Directory User Password Change

[Frank Lothar Weber]

Hi, folks.

My ISE deployment has a connection to our Active Directory, all nodes have been joined using a AD service account. 

Because of a new enterprise AD service account policy, I have to change all passwords of the service accounts to comply to the new policy.

This means, I have to change it on ISE, too !! 

I have read the ise admin guide, but I cannot find anything about changing that password.

Found password change procedures for any other passwords on ISE (cli or gui), but nothing for this case.

Anybody knows, how this can be done (possibly without leaving and rejoining the domain) ??

Rgs

Frank 

[Octavian Szolga · Accepted solution]

Hi,

Sorry if I misunderstood your question, but you don't need to change anything on ISE.

The user credentials you used to join all ISE nodes to AD are one time only. You don't save them anywhere (unless you specify to save them or something similar - haven't tested the feature yet).

ISE queries AD for user/machine attributes and so on using its own machine account (ie - ISE itself as a domain computer).

Regards,

Octavian

[Frank Lothar Weber]

---

@Octavian Szolga wrote:

Hi,

Sorry if I misunderstood your question, but you don't need to change anything on ISE.

The user credentials you used to join all ISE nodes to AD are one time only. You don't save them anywhere (unless you specify to save them or something similar - haven't tested the feature yet).

ISE queries AD for user/machine attributes and so on using its own machine account (ie - ISE itself as a domain computer).

Regards,

Octavian

---

Thanks for you reply ....

Really ?? If that is true, it would make my life much easier .. :-)

I will definitely check this.

Rgs

Frank

[ajc]

I would say that the only case you could probably need to do something is when you are using F5 to LB all the PSN's and the F5 has configured a AD account for health monitoring purposes of each PSN.

But looks like that is not your case.