Forum Discussion

Brass Contributor

Mar 17, 2024

MDI and multi-tenancy

Hi, We have the following setup: Developer Azure Tenant and developer on-prem domain (sync'ed via AADConnect) Production Azure Tenant and Production on-prem domain (sync'ed via AADConnect) ...

azure active directory

Sensor

skjivert

Copper Contributor

Mar 19, 2024

ShimKwan

Should work fine i believe. As long as you have the licenses in your production tenant to cover both forests. You can read more here

https://learn.microsoft.com/en-us/defender-for-identity/deploy/multi-forest

ShimKwan

Brass Contributor

Mar 20, 2024

Hi skjivert,
Thank you for the link - even though it mentions "Forests", you reckon it should therefore also apply to "Tenants"?
Secondly, if a company has E5 licensing, they will have MDI - correct?
Is there also a limit within this E5/MDI license on the amount of domain controllers for the sensor deployment? Or are there any additional costs (other than E5)?

I thought E5 included MDI.
Thx
SK

esatyaman
Microsoft
Apr 04, 2024
Hi ShimKwan,

Yes, E5 licenses come with MDI.

MDI automatically onboards all users in the tenant (Reference below) and limit for DC Sensor should be 350.
https://learn.microsoft.com/en-us/defender-for-identity/deploy/capacity-planning#manual-sizing-estimation-for-domain-controllers

Regards,
Esat