Posture - 802.1x Wired - Windows 11

[matt.w]

Howdy Guys,

been doing some troubleshooting, and it turns out that Windows 11, in the registry, still actually reports itself as Windows 10 Enterprise, just with a difference Version Number.

So we currently have Posture policy which is set for Win 10 only, but it is being applied to Windows 11 devices and causing issues, as the Firewall check fails and a couple of other requirements.

Is there a way that we can check somewhere, the registry attribute for Windows build version number to ensure that Win 11 does NOT get the posture settings applied? if that makes sense?

Profiling is good, they get set there correctly, but when being postured they are falling into the Win 10 (all) OS selection

We are running ISE 3.0 Patch 6

[Greg Gibbs · Accepted solution]

If the Win11 PCs are correctly being profiled as Windows11-Workstation, you might try the following.

1. Navigate to Policy > Profiling > Logical Profiles and create a new Logical Profile that matches on the Windows11-Workstation policy (e.g. 'Windows11 Devices')

2. In your Posture policy rule, select the Other Conditions drop-down and select Create New Condition. Define the condition as 'Endpoints:LogicalProfile NOT_EQUALS Windows11 Devices'

This should prevent your profiled Win11 PCs from hitting the rule.

[mohamed orabi]

Dear  Greg Gibbs

I have same issue but I didn't find the Windows 11 policy to match it with the logical profile do you have any advice?

[Greg Gibbs]

@mohamed orabi , you should ensure you have a current profiler feed update from the Feed Service