Is it possible to find out in which OU the Defender tokens are located?
When importing the tokens, the Import Wizard asks for the location. This defaults to the current selected location in Active Directory Users and Computers.
It is also possible to use an LDAP search objectclass=defender-tokenclass. This could be done in dsquery, asidedit etc
dsquery * -filter objectclass=defender-tokenclass
NOTE: The "Find" option in ADUC does not show the OU of the tokens location.