I have a question. Are there any known instances where ISE has been seen to block all endpoint pc's connecting to a DC that has been newly added to an existing domain. When the new DC in HQ site is turned on  a whole floor of endpoints get their NiCs...