Hello
I struggled with this very issue myself. I learned and needed remind myself that ISE profiling is not an exact science. I also tested each and every profile widget to see what value each provided. DNS, radius, DHCP, http redirect etc.
I found that each of these profile pieces have their own corky work around. Your profiled library of devices at best is a best guess.
The best way to profile a device as a company issued device put a cert on it. You won't know what bee of windows but you will know it's a company asset. For mobile mdm is the way to go.
If if your simply trying to break down windows version you might try http redirect.
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
___________________________________________________________
