At around the 28 minute mark you show we need to use a DACL as part of the posture redirect. Then around the 37 minute mark when you start creating the Authorization policies, a DACL is never referenced. Can you please explain?
Could you please share the content of the PowerShell script you used for the Domain Join condition? Also, what is ISE looking for from the executing that script? How did ISE determined that the endpoint satisfied the Domain Join requirement?
