We have a DAP policy for windows 8, 7, Vista and MacOS. When windows 10 system connects users are able to login even though no DAP policy matches. I have the debug dap trace 255 output now.  I can see the platform= win & platform version = 10.0.17134...

current Forest and Domain Functional Levels were upgraded from 2003 to 2008 after which we have issues with ACS. We are getting authentication failures "22056 Subject not found in the applicable identity store(s)"   1.       Test the AD connections: ...

While creating DAP policy for Anyconnect endpoint attribute for operating system we have option for window XP/8/vista/7 but no option to select windows 10.   And when we dont have the policy specific to window 10 it should ideally get dropped by defa...