03-12-2014 12:44 AM - edited 03-10-2019 09:31 PM
I plan to implement ISE to force user to provision and enroll certificate,
But for the windows user whose join domain they don't have an admin right permission
they cannot download and run the network setup assistant(winspwizard).
What is the least permission that i have to allow for the user to pass the provision process?
03-12-2014 02:59 PM
Can you explain your query in more detail. As per my knowledge in case of ISE NSP is automatically pushed by ISE to client after successful authentication.
03-13-2014 03:55 AM
Client browser have to request to download winspwizard from ISE so for the default domain user which do not have permission to download,install or run any program that perform change on their computer they cannot pass the process without knowing the admin user/pwd. Thankyou.
02-09-2017 01:47 PM
Hello,
I have same problem, have you found solution ? thanks
M.
03-18-2014 10:12 AM
https://supportforums.cisco.com/discussion/11851011/ise-and-ad-integration
The Active Directory username that you provide when joining to an Active Directory domain should be predefined in Active Directory and must have one of the following permissions:
– Add the workstation to the domain to which you are trying to connect.
– On the computer where the Cisco ISE account was created, establish permissions for creating or deleting computer objects before joining Cisco ISE to the domain.
– Permissions for searching users and groups that are required for authentication.
After you join Cisco ISE to the Active Directory domain, you will still need these permissions to:
– Join any secondary Cisco ISE servers to this domain
– Back up or restore data
– Upgrade Cisco ISE to a higher version, if the upgrade process involves a backup and restore
10-14-2016 02:28 PM
I'm having the same issue with ISE 2.1, domain joined computers who doesn't have admin rights unable to run Cisco network assistant. Did you find any solution or workaround about this issue?
Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide