@Jason Yan
Hi,
The general requirement is, any User or Device that accesses the server software, either directly or indirectly, requires a CAL.
But you don't need purchase CAL for each user/computer adding to AD and you only need appropriate amout of CALs for your users or devices to use Active Directory legally.
For your reference:
Client Access Licenses and Management Licenses
https://www.microsoft.com/en-us/licensing/product-licensing/client-access-license
If you need a definite answer, you'd better find yourself a good Microsoft Reseller who is willing to do a complementary license audit. Usually they will do this with the notion that you will purchase any missing licenses through them to become compliant.
Hope above information can help you.
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.