Hi Everyone,

I'm wondering how you handle re-imaging desktops and running ISE on the network. Currently the helpdesk biggest beef with ISE on the network is they have to bring the PC back to their area to re-image a PC on a port that isn't running ISE.

Wondering if someone has built a MAB policy to handle corporate desktops before they are put on the domain and get all the GPO's.

Thanks

Agree with adecisco, without 802.1x enable, your only other option is MAB. You can temporarily add the PC MAC address to an Endpoint Group and create and Authorization policy to allow just enough access for the PC to be re-imaged. The problem I can see is the person who does the re-image probably does not have access to ISE to add the MAC address so it might take coordination between the two parties.