ISE Test User Authentication not returning groups

[joeharb]

We are running ISE version 3.1.0.518 Patch 7 and when we attempt to Test a User and see their groups from AD we see the SID but the name is not resolved or returned.

Please see the screenshot..

Thanks,

[Aref Alsouqi]

If you try to run the active directory health checks from the "Active Directory Diagnostic Tool" page do you see any errors?

[joeharb]

I have never used that tool...I do some failures for DNS SRV record query and DNS SRV record size as well as some warnings:
[cid:image001.png@01DA52A9.953F8690]

[Aref Alsouqi]

In addition to what @Rodrigo Diaz suggested, could you please share the results output for review please.

[joeharb]

Ok I was able to determine that only some of the groups are able not able to be identified, I can scroll down (no side slide bar, have to use the curser).

[Rodrigo Diaz]

hello @joeharb , check that the groups are correctly added within the Active Directly configuration you have, in any case you can go and try to update the SID values for the groups retrieved for the AD , review the following image 

let me know if that helped.