Autopilot and NAC integration

[HeretoLearn23]

What is the best procedure for OOBE Autopilot devices and NAC integration? We have MDM Connector configured. When ever a new device is connected it is moved to isolation and cannot continue with OOBE. 

Currently our windows devices registered as a host if persistent agent is on the machine. 

Current MDM Connector Configs.

 

FortiNAC 

[AEK]

When you say the device is moved to isolation, do you mean registration, authentication, or other?

[HeretoLearn23]

Its is Registration but we currently do not allow users to actually Registration/authentication via Captive Portal. 

Here is an example of where we get stuck at in the OOBE process. 

[AEK]

https://community.fortinet.com/t5/FortiNAC/Technical-Tip-Troubleshooting-MDM-registration-issues/ta-...

Hope this helps.

[ebilcari]

Since this type of setup "OOBE Autopilot" is a Microsoft feature I guess you are using InTune as MDM, is this correct? What version of FNAC are you currently running?

Due to Microsoft changes the option "Enable On Demand Registration" may not work, the issue is fixed and will be included in next releases (reference #919953).

As a workaround you can lower the "Automatic Registration Polling Interval" to 30 minutes. This option will try to register new hosts found in Intune before they are connected in network devices managed by FNAC.