You install Symantec Endpoint Protection (SEP) with the Symantec Endpoint Threat Defense for Active Directory (TDAD) feature onto your domain controller. However, the agent for this feature does not load on the domain controller.
Microsoft Windows
This behavior is working as designed. The agent for Endpoint Threat Detection for AD is not supported on domain controllers.