defender for identity sensor install

Yes, we suggest you put the sensor on all domain controllers to ensure you capture the most traffic possible. Be advised that using the standalone sensor described above isn't recommended for an entire environment, as it won't capture Event Tracing for Windows data that the natively installed sensor would capture, and as a result, will impact on several detections.