ISE 2.2 Automatically Block all the users

[gullmkhan999]

Dear All,

we have ISE 2.2 in our network and network devices are integrated to it, we can login through ISE user in our devices, the issue which i faced with ISE that is it automatically block all the users, every morning we have to enable the user and gain access to the devices via ISE. i searched alot but didnt find any solution thats why i am posting it here. it would be appreciated to have your comments regarding this issue

[hslai]

Assuming you are using ISE internal users, please take a look at ISE internal user for TACACS+ status monitoring and Account Disable Policy

[gullmkhan999]

Thanks For your kind reply.

Yes the users are local user through which we can login into our devices, and as you stated to check the account disabled policy, from administration tab in setting, user authentication, password lifetime, Disable user account after 60 days, this option is unchecked and account disabled policy that is also uncheck. the issue which i have posted here it is different you suggested. ISE blocking all the Local users everyday and we have to enable it at every morning, there is no policy configured to block or account expiration policy. all the options are disabled. Please Help!!!!

[Jason Kunst]

Please open a tac case

[hslai]

I hope you have followed Jason's suggestion. TAC can help gathering debugging info and troublehsoot it for you.

If all the users were created before un-selecting the options, please create new users and check.