PDF(51.8 KB) View with Adobe Reader on a variety of devices
ePub(121.7 KB) View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
Mobi (Kindle)(111.8 KB) View on Kindle device or Kindle app on multiple devices
Updated:October 21, 2020
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This document describes the solution of the issue when Microsoft Active Directory Domain Controller starts to respond to the false failure notification with "error code: 0xc0000064" for authentication requests from the Cisco Identity Services Engine (ISE).
Cisco recommends that you have knowledge of these topics:
Cisco Identity Services Engine (ISE).
Microsoft Active Directory (MS-AD).
The information in this document is based on these software and hardware versions:
Identity Services Engine (ISE) 2.4 & 2.6 on VM (Small).
Microsoft Active Directory (MS-AD) 2012.
The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any step.
Two log entries observed (failure & successful) in Event viewer Audit logs of Domain Controller (DC) for each authentication request from ISE.
The failure is with reason "NO_SUCH_USER” and error code: 0xc0000064
Behaviour is related to defect CSCvf45991 and the following steps should resolve the issue.
Step 1. Upgrade ISE to version or patch in which CSCvf45991 is fixed.
Step 2. Join ISE to desire AD Domain.
Step 3. In order to configure Registry Settings, navigate to Advance Tool > Advance Tuning.