WLC ignore redirect from ISE

Question

Hi all,
I have a question about redirect on a WLC 2504.
The problem is that with domain computers the WLC skip POSTURE_REQD an goes in RUN state directly when connecting to the guest SSID. No CWA and guest portal. If I use a non-domain computer, or an iPhone, the guest flow is working as it should.
On ISE a can see that the correct AuthZ profile is sent,  verified  this with Wireshark as well, (and non-domain devices are working).
On the WLC I can see under client information that  there is a redirect url and a redirect ACL, but on a domain computer the  state is RUN directly.
(non domain devices have POSTURE_REQD).
This is on a open guest WLAN with CWA configured on a WLC 2504 v7.2.111 with an ISE v1.1.3 as AAA server.
There are other WLAN on the WLC using NPS as AAA at the moment, a guest WLAN with LWA and a campus 802.1X PEAP WLAN.
There is also a BYOD WLAN not in production yet, but working, using ISE as AAA server.
Anyone have any good idé about this?
Update:
Same problem with a Windows Mobile 8 phone, Nokia Lumia 920, not in the domain.  It just skiped redirect and got RUN state on the WLC without credentials.
Regards 
  Mikael
Message was edited by: Mikael

Answer 1

No this is only on the guest WLAN.
Actually I found the problem when testing dual setup for BYOD, I did only gave a domain computer to test windows provisioning on, but it never gets that far in the process.
Mikael