You will have to have an account that will be able to add the NGS to the domain, if the NGS is unable to create its own account then it will not be able to authenticate users via SSO. Please let your client know that he will need an admin account in order to allow the NGS join the domain.
I disagree with the documentation pointing to DNS as the only reason for the error, you can use the account permissions that ISE needs in order to join the domain as this should work. Also what version of NGS are you running and also what version is the domain controller you are trying to connect to?
•The Active Directory username that you provide while joining to an Active Directory domain should be predefined in Active Directory and should have any one of the following permissions:
–Add the workstation to the domain to which you are trying to connect.
–On the computer where the Cisco ISE account was created, establish permissions for creating computer objects or deleting computer objects before you join Cisco ISE to the domain.
–Permissions for searching users and groups that are required for authentication.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...