Createa an exclusion template for Microsoft recommended exclusions for AD
Microsoft has a set of exclusions that it recommends for AD. As a starting point from which users could add/remove further exclusions, how about a template of exclusions to import into Sophos for Domain Controllers.
T. Nether commented
or simply add exclusions to "Sophos Central Windows Server Automatic Exclusions" (https://community.sophos.com/kb/en-us/121461)