MDI on RODC only

[MarkPnt]

Hi all,

I'm going through the implementation guide for Defender for Identity, but on this section it is stated that "Defender for Identity sensors should be installed on read-only domain controllers (RODC)".

Is it correct? It's not clear to me if the phrase stands for "MDI sensor is compatible with RODC too" or "MDI sensor must only be installed on RODCs", which seems to be quite limiting.

Thank you in advance!

[#2 · Accepted solution]

You should install on ALL domain controllers, including RODC.
The comment is there as we had many questions asking if installation is needed also on RODC.
I agree the note is not that clear.

I suggest that you press the feedback button on the bottom of the page, press "This page" and explain the note should say "installed *also* on "...

The tech writers take the feedbacks on MDI seriously...

[#3]

Thank you, I'll send the feedback as suggested