Cisco: Security - ISE 3.0 Integrate with Active Directory (AD)

This Video Prescriptively shows how to integrate ISE to Active Directory for any of the services. Follow-on videos will show how to use the active directory integration for 802.1x, RADIUS, and Administration.

[@StudioGGStudios]

Another Great one. Love it. Thanks for all the Quality Videos Nate.

[@chriscowboyfan]

thank you for the thorough video

[@adipapaianus]

Hi Nate, in large enterprises you are not allowed to use domain accounts for joining anything to the domain. Instead you have to reply to "service accounts". Do you know which permissions a service account needs to have to be able to join ISE to the domain? I've got an error saying the account was not able to create a machine account or update the existing account. Thanks

[@nomoracin]

Nate - Also, we're getting the "AD: ISE password update failed" alarm on our Cisco ISE dashboard. We found that we may need to change registry key (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
estrictremotesam) in order for ISE to make remote calls to SAM, but which box does that need to be changed on? ...the Domain Controller(s)?

[@nomoracin]

Nate - how do you located the ISE AD account that it creates itself?

[@perthhometv8562]

No config required on AD server to integrate ISE?