Symptom

Customer wants to Configure Preferred Domain Controllers using the Advanced Tuning options Step 1 In the Cisco ISE GUI, click the Menu icon () and choose Administration > Identity Management > External Identity Sources > Active Directory > Advanced Tools > Advanced Tuning. Step 2 From the ISE Node drop-down list, choose the ISE node that you want to configure. Step 3 Enter the following registry key in the Name field: REGISTRY.Services\lsass\Parameters\Providers\ActiveDirectory\PreferredDCs\ Step 4 In the Value field, specify the domain controllers that you want to add to the preferred list, separated by a space, for example, dc01.domain.com dc03.domain.com dc05.domain.com. Step 5 In the Comment field, enter a description about the preferred list. Step 6 Click Update Value. At this point ISE shows an Error: This registry setting does not exist.

Conditions

Any Active directory join point configured under Administration > Identity Management > External Identity Sources > Active Directory.

Workaround

Please open a TAC case. There is no way to fix this without TAC intervention.

Further Problem Description