Thank you for your post!
Based off my research, when it comes to deploying the Microsoft Defender for Identity (MDI) sensor(s), it's recommended that you have a Defender for Identity sensor or standalone sensor for each one of your domain controllers. This'll ensure accurate and effective monitoring of each domain controller and its associated network traffic, as each sensor is designed to monitor a specific domain controller.
For more information, see Defender for Identity sensor sizing.
Additional Links:
- How many Defender for Identity sensors do I need?
- Defender for Identity sensor estimated sizing
- Deploy Microsoft Defender for Identity with Microsoft Defender XDR
- Download the Microsoft Defender for Identity sensor
I hope this helps!
If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.