Author: Eswar Koneti

In part 6 here,we have created MBAM collection ,application for MBAM 2.5 SP1 agent and deployed to our Clients and did the bitlocker drive encryption for windows 8.1 Client.We have also retrieved the bitlocker recovery key using self service portal and reviewed the bitlocker compliance reports. In this part 7 of MBAM 2.5 SP1 multi series guide,we will do the bitlocker drive encryption for windows 10 ,also see the new features(Configure pre-boot recovery message and URL) included for windows 10. To know more whats new in MBAM 2.5 SP1 ,refer TechNet document here I have created a windows 10 RTM…

In part 5 here ,we have downloaded the MDOP 2015 templates ,extracted,copied MBAM 2.5 SP1 .admx and .adml templates to our Domain controller ,Created GPO for workstation OU and deployed it. In this Part 6 of MBAM 2.5 SP1 multi series guide ,we will create collection ,application for MBAM 2.5 SP1 agent and deploy to our Clients and do the bitlocker encryption stuff. In earlier versions of  MBAM ,it usually ships with MSI which can be directly import to SCCM /GPO where as in MBAM 2.5 SP1, a separate MSI is no longer included with the MBAM product. However,…

In part 4 here ,we have installed the MBAM components on our MBAM server (MBAM01) . In this part 5 of this MBAM 2.5 SP1 series guide,we will configure the prerequisites required for windows clients using Group Policy objects before we deploy MBAM Agent and drive encryption. Before we Configure and deploy MBAM 2.5 SP1 Agent settings using Group policy to our client computers,lets have a look at, what types of Bitlocker that MBAM supports. Types of BitLocker protectors that MBAM supports: In MBAM 2.5 SP1, if you enable Used Space Encryption via BitLocker Group policy, the MBAM Client…

In part 3 here of this MBAM 2.5 SP1 multi series guide,we have installed MBAM prerequisites for configuration manager 2012,changes to MOF file,inventory changes,MBAM collection etc. In this part 4 ,we will see the main components of MBAM 2.5 SP1, which are database ,reports and web application. Login to MBAM01 server with CM_SRV (MBAM_admin) account ,mount the MDOP 2015 ISO,browse to the MBAM 2.5 SP1 folder. Run MBAMserversetup with default options Next,Next ,Next until the last screen. Click on Add new features we will first install database and reports and later will install web applications. Enter the SQL server…

  In Part 2 here of this MBAM 2.5 SP1 multi series, we have installed prerequisites for Windows roles/Features and SQL server components,Permissions to the Database and reports. In this post (part 3) ,we will see the prerequisites for the Configuration Manager Integration feature with MBAM. If you do not want to integrate MBAM 2.5 SP1 with your Existing Configuration manager environment,you can skip this part and jump to Part 4 . My Configuration manager is running on 2012 R2 SP1 (standalone) with SQL server installed on local box. Before we install the MBAM feature on our Configmgr,verify the account…

In part 1 here ,we have created the AD user accounts,security group and register SPN .In part 2 of this multiple series guide ,we will install windows roles/features ,SQL server 2012 SP1 and configure database,permissions etc on our MBAM server (MBAM01). MBAM SQL server Requirements: Login to the MBAM01 server using account that has local administrator rights (I use my SCCM installation account in this case CM_srv, if you have created mbam_admin,use that account) ,open Server Manager ,select add roles and features. select the following roles and features: Roles: Web Server (IIS) Management Tools (Click IIS Management Scripts and…

In first part (part 1) of this multi series guides ,we will setup the user accounts and security groups required in Active Directory to install ,configure MBAM server. Create the Following AD Accounts and security groups in your domain controller (Perform the following steps in Domain controller) under specific OU.In my lab ,I created OU called MBAM .These accounts are used during the installation of SQL server /MBAM server. All the below steps are performed in my domain controller (DC01). Database Accounts         User /Group ? MBAM_DB_RO                  User MBAM_DB_RW                 User HelpDesk Accounts MBAM_HD_Adv                Group MBAM_HD_AppPool      User MBAM_HD_DataMig       Group MBAM_HD_Reports        Group…

Microsoft has released official Windows 10 to the world (190 countries) today (Jul 29,2015) which is now available to perform clean installation (In Place) or you can download ISO using tool called media creation tool for both 32bit and 64bit to perform on other computers.If you haven't got notification via windows update about free upgrade(which is 1 year ),you can use this tool to perform windows 10 update (make sure you have internet connection with high speed to download huge data (3GB Plus)). How do update your existing OS (running windows 7,Windows 8 and windows 8.1 genuine) to Windows 10…