I don't want to have a standalone machine just for AD Helper, and none of my servers have Java 8 installed. What are the requirements for AD Helper?
AD Helper does not have to be installed on a server or even a domain member. It can be installed on any Windows machine that has Java 8 installed, can contact one or more domain controllers via LDAP (TCP/389) or LDAP/s (636), and can reach the target host machines via File and Print Sharing (TCP/445 and TCP/139).
Additionally, AD Helper must be able to reach the TDR Cloud service. If you install AD Helper behind a Firebox that has an HTTPS proxy policy with content inspection and certification validation enabled, it might be necessary to configure an HTTPS packet filter policy to allow connections from AD Helper to the TDR cloud. For more information, see Configure a Firewall Policy for TDR Traffic.