Forum Discussion
Domain controller
It is advisable to equip all servers with Defender for Servers. Since this is about AD servers I can also recommend you to install password protection connectors and implement Defender for Identity
https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers
https://learn.microsoft.com/en-us/entra/identity/authentication/concept-password-ban-bad-on-premises
https://learn.microsoft.com/en-us/defender-for-identity/what-is
subhashv1986
So after going through Microsoft article, I conclude that the MDE can be installed on DOmain controller server but the server can't be managed under MDE or Intune. When you onboard the Domain controller to MDE, you can see Under managed option in Device inventory as "UNKNOWN".
Microsoft has not yet released the feature where in DC servers can be managed under Intune or Defender for Endpoint security settings.
Link
https://learn.microsoft.com/en-us/mem/intune/protect/mde-security-integration
https://learn.microsoft.com/en-us/mem/intune/protect/mde-security-integration#frequently-asked-questions-and-considerations
