Integrating Active Directory of Windows 2016 Server with Cisco ISE 3.0 and using it for authentication and authorization as an external identity store.
ISE integration with AD require atleast a machine admin account or simply a domain admin or service admin account, in order for ISE to extract users and group information from AD.