Azure ATP multi-forest licensing

%3CLINGO-SUB%20id%3D%22lingo-sub-1163416%22%20slang%3D%22en-US%22%3EAzure%20ATP%20multi-forest%20licensing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1163416%22%20slang%3D%22en-US%22%3E%3CP%3EHello!%3CBR%20%2F%3E%3CBR%20%2F%3EI%20have%20a%20forest%20A%20which%20is%20synced%20to%20Azure%20AD%20and%20this%20has%20licensed%20users%20in%20this%20domain.%20Azure%20ATP%20is%20installed%20to%20all%20domain%20controllers%20on%20this%20domain.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20have%20also%20another%20forest%20B%20where%20is%20no%20synchronization%20to%20cloud%20or%20trusts%20between%20this%20forest%20A.%20The%20user%20accounts%20are%20used%20by%20users%20from%20forest%20A%20and%20you%20could%20consider%20these%20B-accounts%20as%20additional%20resource%20accounts%20in%20this%20forest%20for%20security%20reasons.%20Simply%2C%20one%20person%20has%20two%20accounts%20and%20only%20this%20one%20account%20is%20licensed%20with%20Azure%20ATP%20(Forest%20A).%3CBR%20%2F%3E%3CBR%20%2F%3ECan%20I%20install%20the%20ATP%20sensors%20to%20this%20Forest%20B%20domain%20controllers%20if%20the%20users%20who%20use%20the%20domain%20are%20licensed%20already%20to%20forest%20A%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1385392%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20ATP%20multi-forest%20licensing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1385392%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F274612%22%20target%3D%22_blank%22%3E%40Mtee-%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20the%20user%20has%20two%20accounts%20one%20in%20Forest%20A%20and%20one%20in%20Forest%20B%2C%20then%20you%20only%20need%20one%20license%20for%20that%20user.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3EGershon%20%5BMSFT%5D%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hello!

I have a forest A which is synced to Azure AD and this has licensed users in this domain. Azure ATP is installed to all domain controllers on this domain.

I have also another forest B where is no synchronization to cloud or trusts between this forest A. The user accounts are used by users from forest A and you could consider these B-accounts as additional resource accounts in this forest for security reasons. Simply, one person has two accounts and only this one account is licensed with Azure ATP (Forest A).

Can I install the ATP sensors to this Forest B domain controllers if the users who use the domain are licensed already to forest A?

1 Reply
Highlighted

Hi @Mtee- 

 

If the user has two accounts one in Forest A and one in Forest B, then you only need one license for that user. 

 

Thanks

Gershon [MSFT]