Restricting Domain Registered devices from being used in BYOD

[jay.kishan]

Hi,

We have successfully deployed two factor onboarding process (AD Username/Password and Device Registeration using MAB with Profiling) in my organization. However, we have a very specific requirement that we dont want our domain joined machines to get registered using BYOD Onboarding process.

Is there anyway we can do this in ISE 1.2. Any help is appreciated folks.

Thanks in advance.

Jay

[Seth Bjorn]

I'm wondering the same thing, did you ever find a solution to this?

[jay.kishan]

Yes I was able to solve this. I am attaching snapshots. I achieved this by profiling and then creating profiler conditions and profiling policy and later calling them in Authorization Policy.

Please let me know if you are still unable to get your issue resolved.

Jay