Install DC Sensor
This is Step 2 of adding a directory. After you Connect Active Directory, the wizard lands on Install DC Sensor.
Install the Authnull sensor on your Domain Controller. No additional configuration is required — the directory you just connected is pre-selected and locked for this install.
The whole process takes only a few minutes.
Step 1 — Download files
Download both files and place them in the same folder on the Domain Controller:
sensor.yml— your pre-generated, tenant-specific configuration. It is built for the AD you just connected.install.ps1— the PowerShell installer.
sensor.yml contains tenant-specific configuration used to establish trust with the Authnull backend. Do not share it or commit it to version control.
Step 2 — Run as Administrator on the DC
Open PowerShell as Administrator, cd into the folder containing both files, then run:
.\install.ps1
The installer registers the Authnull DC Sensor as a Windows service and starts it.
Step 3 — Verify
Confirm the service is running before clicking Done:
Get-Service AuthnullDCSensor
You should see the AuthnullDCSensor service with status Running.
Finish
Click Done to return to the Identity Providers list. Within about 30 seconds the directory's status changes from Pending to Running, and Authnull begins syncing users, groups, and OUs according to the sync filters you set when connecting the directory.
If it still shows Pending after a minute, see the Agentless AD prerequisites (network/audit-policy requirements) and FAQ.
Next steps
- Identity Providers — monitor connection and sync status, enable MFA
- AD Policies — define MFA and access enforcement
- Agentless AD — how the sensor enforces across Kerberos, NTLM, RDP, SMB, and LDAP