RDP to Windows machine is a known issue where the computer perform machine authentication instead of user authentication. So when you RDP and look at the auth session on switch port, you will see computer name instead of username, and if you have machine auth profile setup to be too restrictive, you may lose access to network right after RDP session connects. A workaround is to obviously 'permit all' traffic for successful machine auth but that mean you just relaxed your security policy and you also will not be able to enforce differentiated user access during RDP since ISE will be authenticating machine instead of user.