Microsoft BitLocker Administration and Monitoring 2.5

Warning

MBAM mainstream support ended on July 2019 and is currently in extended support until April 2026

Microsoft BitLocker Administration and Monitoring (MBAM) 2.5 provides a simplified administrative interface that you can use to manage BitLocker Drive Encryption. You configure MBAM Group Policy Templates that enable you to set BitLocker Drive Encryption policy options that are appropriate for your enterprise, and then use them to monitor client compliance with those policies. You can also report on the encryption status of an individual computer and on the enterprise as a whole. In addition, you can access recovery key information when users forget their PIN or password or when their BIOS or boot record changes. For a more detailed description of MBAM, see About MBAM 2.5.

Important

Enterprises can use Microsoft BitLocker Administration and Monitoring (MBAM) to manage client computers with BitLocker that are domain-joined on-premises until mainstream support ends in July 2019 or they can receive extended support until April 2026 Going forward, the functionality of MBAM will be incorporated into Microsoft Endpoint Manager Config Manager (MEMCM), see Features in Configuration Manager technical preview version 1909

Customers not using Config Manager can utilize the built-in features of Azure AD and Microsoft Endpoint Manager Microsoft Intune (MEMMI) for administration and monitoring, see Monitor device encryption with Intune

For customers in extended support: To obtain MBAM, see How Do I Get MDOP.

Outline

• Getting Started with MBAM 2.5
  • About MBAM 2.5
  • Release Notes for MBAM 2.5
  • About MBAM 2.5 SP1
  • Release Notes for MBAM 2.5 SP1
  • Evaluating MBAM 2.5 in a Test Environment
  • High-Level Architecture for MBAM 2.5
  • Accessibility for MBAM 2.5
• Planning for MBAM 2.5
  • Preparing your Environment for MBAM 2.5
  • MBAM 2.5 Deployment Prerequisites
  • Planning for MBAM 2.5 Group Policy Requirements
  • Planning for MBAM 2.5 Groups and Accounts
  • Planning How to Secure the MBAM Websites
  • Planning to Deploy MBAM 2.5
  • MBAM 2.5 Supported Configurations
  • Planning for MBAM 2.5 High Availability
  • MBAM 2.5 Security Considerations
  • MBAM 2.5 Planning Checklist
• Deploying MBAM 2.5
  • Deploying the MBAM 2.5 Server Infrastructure
  • Deploying MBAM 2.5 Group Policy Objects
  • Deploying the MBAM 2.5 Client
  • MBAM 2.5 Deployment Checklist
  • Upgrading to MBAM 2.5 or MBAM 2.5 SP1 from Previous Versions
  • Removing MBAM Server Features or Software
• Operations for MBAM 2.5
  • Administering MBAM 2.5 Features
  • Monitoring and Reporting BitLocker Compliance with MBAM 2.5
  • Performing BitLocker Management with MBAM 2.5
  • Maintaining MBAM 2.5
  • Using Windows PowerShell to Administer MBAM 2.5
• Troubleshooting MBAM 2.5
• Technical Reference for MBAM 2.5
  • Client Event Logs
  • Server Event Logs

More Information

• MDOP Information Experience

  Find documentation, videos, and other resources for MDOP technologies.

• MBAM Deployment Guide

  Get help in choosing a deployment method for MBAM, including step-by-step instructions for each method.

• Apply Hotfixes on MBAM 2.5 SP1 Server

  Guide of how to apply MBAM 2.5 SP1 Server hotfixes