hi, we are getting defender alerts that out solarwinds server is doing LDAP lookups for all sorts of accounts including admin accounts
do you what could be causing this?
Do you have SAM and AppInsight for AD running? Try disabling that. Also what accounts do you have set up to poll WMI on servers