MBAM requires several service accounts and security groups to be set up prior to installation. Microsoft provides a full compatibility list on the following URL – Active Directory Preparation Īt the time of writing MBAM is currently supported on server operating systems up to Windows Server 2016 and the back-end database on SQL Server 2017. You will also need to download the ASP.NET MVC 4 as a pre-requisite, this can be downloaded from. In order to support the newer AES XTS ciphers in Windows 10 and SQL 2017 though you will also need to download the July 2018 service release ( ). The latest MDOP download available on the Microsoft Volume Licensing Service Center is MDOP 2015. MBAM is part of the Microsoft Desktop Optimization Pack which is included as part of your Windows Enterprise volume licensing.

Part 4: Validation of key storage and recovery tests Downloading the media Part 3: Configuration of GPO policies and client agent deployment Part 2: Validating IIS sites and customisation These items might have been covered in other sources throughout the years since MBAM was released, however I wanted to put everything into a comprehensive guide for our readers. In this series of posts I am going to run through the process of setting up MBAM, deploying the agent and group policies out to clients, customisation of the self service portal and troubleshooting. Microsoft are no doubt looking to move people to a cloud delivered solution but until the shortcomings that are there are addressed, MBAM will continue to be deployed by organisations. Many of you might pose the question of why? is MBAM not a legacy product? can you not store recovery keys in Active Directory or Azure Active Directory instead?.įor many companies simply storing the key in a repository that requires their IT helpdesk staff to have elevated Active Directory or Azure Active Directory rights is not something they want to do, so providing both self service and a dedicated helpdesk portal is the best option for them.Īside from the portal issue the other main benefit for deploying MBAM in your environment is of course the key rollover process that occurs post recovery. Over the past number of months I have had several engagements as a consultant to implement Microsoft BitLocker Administration and Monitoring (MBAM).

Mbam bitlocker cognizant