Defender security server installation requirement

Hi Mahmoud,

Defender security Server does *not* require installation on a Domain Controller.

A member server works fine, the user installer must be a member of Domain Users, Domain Admins, Schema Admins and Enterprise Admins for the installation.

Reference: https://support.oneidentity.com/technical-documents/defender/6.2/administration-guide/2#TOPIC-1742977

Defender uses Radius protocol and so the default port is 1812 UDP which is needed to be open between Safeguard and the Radius Server (in this case Defender is the radius server).

Thanks!

thank you tawfiq,

but when i try to prepare AD schema, i got access error, although I'm using domain administrator account with all sufficient privileges.

Is the installer user a member of all these groups in AD?
Domain Users, Domain Admins, Schema Admins and Enterprise Admins

Yes, added to all these groups.

Next step would be to open a service request and provide the installation logs as per steps in the KB below:
https://support.oneidentity.com/defender/kb/177146/how-to-create-an-msi-install-log-for-defender

Thanks!

Ok thank you Tawfiq