Azure ATP multi-forest licensing

Copper Contributor


I have a forest A which is synced to Azure AD and this has licensed users in this domain. Azure ATP is installed to all domain controllers on this domain.

I have also another forest B where is no synchronization to cloud or trusts between this forest A. The user accounts are used by users from forest A and you could consider these B-accounts as additional resource accounts in this forest for security reasons. Simply, one person has two accounts and only this one account is licensed with Azure ATP (Forest A).

Can I install the ATP sensors to this Forest B domain controllers if the users who use the domain are licensed already to forest A?

1 Reply

Hi @Mtee- 


If the user has two accounts one in Forest A and one in Forest B, then you only need one license for that user. 



Gershon [MSFT]