ISE 3.1 Active Directory synchronisation

[russell.sage]

I have a customer with ISE 3.1- I have a customer laptop and was asked to update my Corporate password. Which I did. Now I can no longer connect to their corporate wifi. ISE tells me see below. Which would be fine but I go to ISE and the Active Directory page select the PSN node and click test using the same credentials I am copying and pasting, so no typo's I pass

Any ideas?

[ahollifield]

Why are you using PEAP anyways?  Why not migrate to using certificates instead?  This would solve this problem as well as credential guard.

[russell.sage]

The customer does use EAP-TLS but is in a transitional phase moving from on premise AD to AzureAD and Intune. I have one of new transitional machines which is using PEAP until the migration is complete.

[ahollifield]

Active directory sync time is the first thing that comes to mind.  If the customer has multiple DCs it may take up time for replication to complete.