Few days ago ,I was working on request to get the software update compliance (compliant /Non-Compliant) for list of clients (Desktops or servers) from collection for specific month.I have posted lot of Configmgr 2012 SSRS reports on my blog http://eskonr.com/tag/sccm-patch-reports/about software update compliant but this is something different compared to other reports. Due to the monthly patching activity,sometimes you may get request to know the the patch compliance status for specific month on specific collection .If you are creating new Software update group every month,then you don’t have to look at this report as there are default and customs reports…
Author: Eswar Koneti
MBAM is Microsoft Bitlocker Administration and Monitoring Tool Enables administrators to automate the process of encrypting volumes on client computers across the enterprise.BitLocker offers protection against data theft or data exposure for computers that are lost or stolen. BitLocker encrypts all data that is stored on the Windows operating system and drives and configured data drives. MBAM 2.5 SP1 has the following features: Enables administrators to automate the process of encrypting volumes on client computers across the enterprise. Enables security officers to quickly determine the compliance state of individual computers or even of the enterprise itself. Provides centralized reporting…
Rolled out new Symantec endpoint Protection (SEP) Version to clients across all the sites. After few days ,report (All application deployment –Basic) says ,around 100+ computers still running on old version which did not upgraded to deployed version.Out of these 100+ clients,some of them already have deployed version if I check via resource explorer (also check from DB with v_add_remove_programs).So ,it assume that,reports having some problem (Table that it retrieve the info from). Since ,the reports are giving inaccurate results,I feel ,It would be good to have these failed clients into one collection to perform certain actions (I know there…
In part 6 here,we have created MBAM collection ,application for MBAM 2.5 SP1 agent and deployed to our Clients and did the bitlocker drive encryption for windows 8.1 Client.We have also retrieved the bitlocker recovery key using self service portal and reviewed the bitlocker compliance reports. In this part 7 of MBAM 2.5 SP1 multi series guide,we will do the bitlocker drive encryption for windows 10 ,also see the new features(Configure pre-boot recovery message and URL) included for windows 10. To know more whats new in MBAM 2.5 SP1 ,refer TechNet document here I have created a windows 10 RTM…
In part 5 here ,we have downloaded the MDOP 2015 templates ,extracted,copied MBAM 2.5 SP1 .admx and .adml templates to our Domain controller ,Created GPO for workstation OU and deployed it. In this Part 6 of MBAM 2.5 SP1 multi series guide ,we will create collection ,application for MBAM 2.5 SP1 agent and deploy to our Clients and do the bitlocker encryption stuff. In earlier versions of MBAM ,it usually ships with MSI which can be directly import to SCCM /GPO where as in MBAM 2.5 SP1, a separate MSI is no longer included with the MBAM product. However,…
In part 4 here ,we have installed the MBAM components on our MBAM server (MBAM01) . In this part 5 of this MBAM 2.5 SP1 series guide,we will configure the prerequisites required for windows clients using Group Policy objects before we deploy MBAM Agent and drive encryption. Before we Configure and deploy MBAM 2.5 SP1 Agent settings using Group policy to our client computers,lets have a look at, what types of Bitlocker that MBAM supports. Types of BitLocker protectors that MBAM supports: In MBAM 2.5 SP1, if you enable Used Space Encryption via BitLocker Group policy, the MBAM Client…
In part 3 here of this MBAM 2.5 SP1 multi series guide,we have installed MBAM prerequisites for configuration manager 2012,changes to MOF file,inventory changes,MBAM collection etc. In this part 4 ,we will see the main components of MBAM 2.5 SP1, which are database ,reports and web application. Login to MBAM01 server with CM_SRV (MBAM_admin) account ,mount the MDOP 2015 ISO,browse to the MBAM 2.5 SP1 folder. Run MBAMserversetup with default options Next,Next ,Next until the last screen. Click on Add new features we will first install database and reports and later will install web applications. Enter the SQL server…
In Part 2 here of this MBAM 2.5 SP1 multi series, we have installed prerequisites for Windows roles/Features and SQL server components,Permissions to the Database and reports. In this post (part 3) ,we will see the prerequisites for the Configuration Manager Integration feature with MBAM. If you do not want to integrate MBAM 2.5 SP1 with your Existing Configuration manager environment,you can skip this part and jump to Part 4 . My Configuration manager is running on 2012 R2 SP1 (standalone) with SQL server installed on local box. Before we install the MBAM feature on our Configmgr,verify the account…