NAC Agent Active Directory GPO scripts

[syedaltaf.shah]

Hi Guys,

NEED HELP HERE PLEASE...

any one can tell me how to dely the NAC Agent posture assessment or shifting from UnAuthenticated vlan to Authenticated (tihis time betweent) vlan for 1 minut or more.

Because when system boots, the first time it gets un-authenticated IP Address and the same time AD GPO Policy deployes the scripts and policies, durring this deployment the NAC Agent changes the system IP to Authenticated VLAN and the current connection with the AD is broken and scripts and policy deployment fails....

i need solution for this....

thanks in advance for any help....

[Tarik Admani]

Syed,

Here is a link that has some helpful scripting techniques to work around the GPO updates.

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cas/s_adsso.html#wp1173302

Thanks,

Tarik

[syedaltaf.shah]

Thank Tarik,

these are all for creating scripts in AD, is there any other workarround for delying the NAC Agent or something ? any configuration in XML file or in NAC Manager?

appreciate your help!