You don't say what you are missing. But basically you need two things in addition to you actual setup:
- An additional rule on the ISE to match the AD identity group "Domain Computers"
- The supplicant needs to be configured for "computer-authentication" or "user- and computer authentication".
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.