Contractors Posturing with ISE

[NETAD]

Hello, I will be deploying posturing in ISE soon. We need to posture contractors and internal users. I have some questions:

Regarding installing the posture module if the users don't have admin rights. Is there a workaround for this?

Can I allow only WIN10 machines to connect to the network with posturing or do I have to leverage profiling for this?  

Also, do I need a publicly signed cert for admin for this to work correctly? 

Thanks 

[balaji.bandi]

it all depends on how your environment, some people have pre-packaged with profile, suggest to have a look below link.

https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273

[NETAD]

We implemented this and when we connect and hit the CPP policy, we're getting a cert warning even though we have a public cert on the portal. Do we need a public cert for admin?