03-20-2018 01:29 PM - edited 02-21-2020 10:51 AM
Hello guys,
I would like to check if a user machine has a open USB port and the user has an administrator right on his work machine.
Is It possible to do it with the posture on Cisco ISE 2.3 ? If yes, which attributs and properties shall I use for that.
Thanks.
03-20-2018 02:14 PM
Hi,
Yes you can get ISE Posture to check for a connected USB device, this guide here shows you the steps you need to take in order to configure posture. The guide may not be 100% what you are looking to do but the configuration of USB Requirements is.
HTH
03-20-2018 02:32 PM
Thank you for the USB check and now I would like to check if the user is administrator of his machine or not. I hear that there is a attribut on the registry which can say if the user is administrator of his machine (domain machine)
03-20-2018 02:42 PM
03-21-2018 12:30 AM
Thank RJI for this idea, I thought about It at the begin. In the organization we want to know how many user from company domain are local administrator of their machine.
If you are local administrator, you can install software and Apps on your computer.
03-23-2018 03:57 AM
Hello RJI,
I don't do that way. It is directly put on the computer administrator group locally.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide