MDI and Azure Arc

Question

If we have deployed MDI to monitor the AD DCs, is there any reason to:

1. register these servers with Azure Arc

2. Connect them with MMA to Sentinel

I don't think so, but I would like to make sure that I'm not overlooking something

TIA

dean_gross · Answer

In a total coincidence, matthew zorich posted this https://learnsentinel.blog/2022/04/12/monitoring-active-directory-with-microsoft-sentinel-the-agent-deep-dive/ which provides a great explanation and may be helpful to others

martin_schvartzman · Answer

Dean_Gross&nbsp;
It is not required for MDI.
&nbsp;

dean_gross · Answer

thanks but i dont understand your response, could you please elaborate

martin_schvartzman · Answer

Dean_Gross&nbsp;
Registering the server with AzureArc and installing the MMA agent would enable you several other benefits, some are described in&nbsp;Azure Arc overview - Azure Arc | Microsoft Docs. But they are not required for MDI to work properly in your environment.

dean_gross · Answer

Martin_Schvartzman&nbsp;thanks, as a follow up, if we arc enable a DC and monitor it with Defender for Servers, how will that overlap with functionality provided by MDI?&nbsp;

Forum Discussion

MDI and Azure Arc

Share

Resources