You install Symantec Endpoint Protection (SEP) with the Symantec Endpoint Threat Defense for Active Directory (TDAD) feature on your domain controller. However, the agent for this feature does not load on the domain controller.
This behavior is working as designed. The agent for Endpoint Threat Detection for AD is not supported on domain controllers.