Defender Setup Question - does the DSS need to be installed on a Domain Controller? (4343113)

Question about where to install Defender.  It's understood that there are schema changes that go into Active Directory (AD), but is it possible to have the services installed on its own hardware, not on a Domain Controller?

Does the Defender Security Server (DSS) need to be installed on a Domain Controller?

The Defender service (DSS) can run on a Domain Controller (DC) or a member server.  We recommend installing the service on a member server to eliminate any extra resource usage on the DC.

You can install the service based on your hardware and system availability.  The system requirements can confirm for you what is required, these are available in the Release Notes.