Feb 09 2020 10:22 PM
Hello!
I have a forest A which is synced to Azure AD and this has licensed users in this domain. Azure ATP is installed to all domain controllers on this domain.
I have also another forest B where is no synchronization to cloud or trusts between this forest A. The user accounts are used by users from forest A and you could consider these B-accounts as additional resource accounts in this forest for security reasons. Simply, one person has two accounts and only this one account is licensed with Azure ATP (Forest A).
Can I install the ATP sensors to this Forest B domain controllers if the users who use the domain are licensed already to forest A?
May 13 2020 12:56 AM
Hi @Mtee-
If the user has two accounts one in Forest A and one in Forest B, then you only need one license for that user.
Thanks
Gershon [MSFT]