Forum Discussion
Different DAS Accounts for SAM-R in a Tier model
I have the same question.
We are planning a MDI deployment. Same tiering like your case.
How did you deploy MDI DSA in the end?
I am thankful for any input.
Best regards.
For our MDI (Microsoft Defender for Identity) deployment, we ultimately had to proceed with a straightforward implementation approach, as we also received no definitive guidance from Microsoft. Here’s how we managed it:
We assigned the necessary permissions to the Directory Services Account (DSA), ensuring it had the required privileges for the environment. This involved setting the appropriate permissions manually, aligned with Microsoft’s documentation on minimal permissions for MDI, rather than any specialized tiered deployment configuration. We also monitored closely to confirm that access and permissions worked as intended in our environment.
