Monitoring your domain controller coverage
Threat protection product names from Microsoft are changing. Read more about this and other updates here. We'll be updating names in products and in the docs in the near future.
As soon as the first Azure ATP sensor is installed and configured on any domain controller in your network, Azure ATP begins monitoring your environment for domain controllers.
Once an Azure ATP sensor is installed and configured on a domain controller in your network, the sensor communicates with the Azure ATP service on a constant basis sending sensor status, health and version information, and collected Active Directory events and changes.
Domain controller status
Azure ATP continuously monitors your environment for unmonitored domain controllers introduced into your environment, and reports on them to assist you in managing full coverage of your environment.
To check the status of your detected monitored and unmonitored domain controllers and their status, go to the Configuration area of the Azure ATP portal, under the System section, select Sensors.
Your currently monitored and unmonitored domain controllers are displayed at the top of the screen. To download the monitoring status details of your domain controllers, select Download Details.
The domain controller coverage Excel download provides the following information for all detected domain controllers in your organization:
|Domain name||Domain name|
|Monitored||Azure ATP monitoring status|
|Sensor type||Azure ATP sensor or Azure ATP standalone sensor|
|Organizational unit||Location inside of Active Directory|
|Operating system version||Version of operating system detected|
|IP address||Detected IP address|
Search domain controllers
Managing your fleet of sensors and domain controllers can be challenging. To make it easier to find and identify, domain controllers can be searched using the search feature in Azure ATP Sensors list.
To search your domain controllers, go to the Configuration area of the Azure ATP portal, under the System section, select Sensors.
Select the filter option on the domain controller column in the domain controller table list.
Enter the name you wish to search. Wildcards are not currently supported in the search field.
Azure ATP portal configuration pages can be modified by Azure ATP admins only.