Microsoft Bitlocker Administration and Monitoring

Important Request Numbers

• RITM1029531 (Test)
• RITM1029532 (Test)
• TASK1461055 (Firewall Rules) (Test)
• RITM1118176 (Production)
• RITM1118177 (Production)
• RITM1135236 (Production SSL)
• RITM1135238 (Production SSL)
• KB0024590 - RunBook for MBAM
• RITM1290879 - Monitoring Request
• KB0024847 - How to Link an OU to MBAM with a GPO

Documentation

Microsoft Documentation

• Microsoft BitLocker Administration and Monitoring
• How to Configure the MBAM 2.5 Web Applications
• Planning for MBAM v2.5 - Group Policy Requirements Planning for MBAM
• MBAM 2.5 Server Prerequesites for Stand-alone and Configuration Manager Integration Topologies
• MBAM 2.5 Supported Configurations
• Deploying MBAM 2.5 in a stand-alone configuration
• How to Deploy the MBAM Client to Desktop or Laptop Computers
• MBAM v2.5 - Operations for MBAM
• BitLocker Frequently Asked Questions

YouTube Videos

• YouTube video - Deploying Microsoft BitLocker Administration and Monitoring (MBAM) 2.5
• MBAM YouTube Play List

My Documentation

• MBAM Architecture
• Get BitLocker Recovery Information from AD using Powershell

Internet Documentation

• How to unlock an encrypted computer using the MBAM IT Admin Portal
• How to recover a Drive in Recovery Mode with MBAM - KB0025724
• How to recover a Moved Drive - KB0025726
• How to recover a Corrupted Drive - KB0025727
• How to Reset a TPM Lockout - KB0025728
• How to setup MBAM Bitlocker encryption manually
• How to setup Active Directory and Group Policy for MBAM
• How to setup MBAM for a Department
• Editing the MBAM 2.5 Group Policy

Installation Process

Request Servers

• MBAM Server (RITM1029531)
• MS-SQL Server (RITM1029532)
• MBAM Test Environment Installation Process

Install Pre-Requesites

• Install Powershell 3.0
• Install Microsoft Server 2008R2 or later with Service Packs
  • Need to include SQL_Latin1_General_CP1_CI_AS collation.
  • Install Database Engine
  • Install Reporting Services
  • Install Client Tools Connectivity
  • Install Management Tools - Complete

Client Installation

• How to Deploy the MBAM Client by Using a Command Line

Important Notes

• According to How to Deploy the MBAM Client to Desktop or Laptop Computers
  • "The MBAM Client does not start BitLocker Drive Encryption actions if a remote desktop protocol connection is active. All remote console connections must be closed and a user must be logged on to a physical console session before BitLocker Drive Encryption begins."
• MBAM Clients will communicate with the server via port 443