Machine Authentication Issue

[zakid]

I have an ISE 1.2 

I am configuring it with Machine authentication with PEAP , Users are working Fine 

Just he connect his Cable , it authenticate his Machine and Machine dACL is Downloaded then he  log in with his username/password and NAC starts provisioning 

the issue is : some Users is part of domain and their machine joined the domain , but their machine cannot authenticate successfully

I am sure that these machine not included on denied endpoint groups , and Dot1x is enabled 

Attached two images for that issue   

[Jimmy Johansson]

Could you post the results from the clients authentication under ISE -> Operation -> Authentication

[manjeets]

Have a look...

http://www.youtube.com/watch?v=bjH99xKepLY