Symptom
Customer wants to Configure Preferred Domain Controllers using the Advanced Tuning options
Step 1
In the Cisco ISE GUI, click the Menu icon () and choose Administration > Identity Management > External Identity Sources > Active Directory > Advanced Tools > Advanced Tuning.
Step 2
From the ISE Node drop-down list, choose the ISE node that you want to configure.
Step 3
Enter the following registry key in the Name field:
REGISTRY.Services\lsass\Parameters\Providers\ActiveDirectory\PreferredDCs\
Step 4
In the Value field, specify the domain controllers that you want to add to the preferred list, separated by a space, for example, dc01.domain.com dc03.domain.com dc05.domain.com.
Step 5
In the Comment field, enter a description about the preferred list.
Step 6
Click Update Value.
At this point ISE shows an Error: This registry setting does not exist.
Conditions
Any Active directory join point configured under Administration > Identity Management > External Identity Sources > Active Directory.
Workaround
Please open a TAC case. There is no way to fix this without TAC intervention.
