This it will force MBAM agent to contact MBAM server, check the compliance settings, report and start encryption.įor more information check the logs, Event Viewer -> Applictions and Services Logs -> Microsoft -> Windows -> MBAMĪfter encryption is finished go to control panel, system and security, open Configuration manager agent properties and run Hardware Scan. On the new computer force group policy to be applied, to take MBAM settings gpupdate /force than go to services and restart bitlocker Management services. Script, save as bat file, create a package in sccm and invoke the. Now, you have MBAM environment ready, deploy MBAM client (MDOP MBAM) trough SCCM Task Sequence.Īfter MBAM client in task sequence add a reg key to force MBAM client to encrypt fastest possible and not waiting 90 min. Once you finished to install MBAM server and on SCCM server the MBAM integration (it will create out of box reports, bitlocker compliance, MBAM ready computer collection, etc) you need to create the GPO to manage MBAM, please note you need to import MBAM ADMX GPO to cover MBAM settings, don’t use default Bitlocker settings from GPO. mof configuration and add new classes for HW scan Very important in prerequisites is to modify. I will not cover MBAM installation here, if you need a guide just go to Microsoft official MBAM with SCCM topology link This is from far the easiest way to manage the computer fleet with just one product, the mighty SCCM 😊. Actually where I go to design MBAM I always use the MBAM sccm integration if SCCM is already in use. In this article I will give you the best practices to work with MBAM and SCCM. But even so we still continue to use MBAM in many projects. Unfortunate MBAM is close to end of support in June 2019. I have been lately in many Windows 10 migrations projects and I’ve seen many companies moving to MBAM, the main reason was that this is the most easy and stable encryption method to support the fast pace windows 10 releases. MBAM was a good option to manage bitlocker and computer disk encryption in general.

Mbam windows