I have a forest A which is synced to Azure AD and this has licensed users in this domain. Azure ATP is installed to all domain controllers on this domain.
I have also another forest B where is no synchronization to cloud or trusts between this forest A. The user accounts are used by users from forest A and you could consider these B-accounts as additional resource accounts in this forest for security reasons. Simply, one person has two accounts and only this one account is licensed with Azure ATP (Forest A).
Can I install the ATP sensors to this Forest B domain controllers if the users who use the domain are licensed already to forest A?