Which action must an administrator take after joining a Cisco ISE deployment to an Active Directory domain?