Can the defender for identity sensor be installed on normal vms being used for DBs and Apps? because we fully cloud based and have no on prem domain controllers

Question

Improvement Action: Start your Defender for Identity deployment, installing Sensors on Domain Controllers and other eligible servers.

We need to establish if we can utilize this service on normal VMs and if there is any benefit of it?

Answer 1

@Rizwan Assad Thank you for reaching out to us, As I understand you want to leverage defender for identity for DB's and apps which are cloud based as well,

What does defender for identity collect -

Defender for identity is primary for detecting on-premise AD attacks, in order to protect other resources you can leverage defender for cloud - https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-cloud-introduction#protect-cloud-workloads

https://learn.microsoft.com/en-us/azure/defender-for-cloud/connect-azure-subscription

Let me know if you have any further questions, feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.