Prerequisites for the Configuration Manager Integration Feature
Dotyczy: Microsoft BitLocker Administration and Monitoring 2.5
If you deploy MBAM with the System Center Menedżer konfiguracji Integration topology, we recommend a three-server architecture, as described in High-Level Architecture of MBAM 2.5 with Configuration Manager Integration Topology. This architecture can support 500,000 client computers.
Ważne
Windows To Go is not supported for the Menedżer konfiguracji Integration topology installation when you are using Configuration Manager 2007.
General prerequisites for the Menedżer konfiguracji Integration feature
When you install MBAM with Menedżer konfiguracji, the following additional prerequisites are required in addition to the prerequisites for the Stand-alone topology.
| Prerequisite | Additional information |
|---|---|
The Menedżer konfiguracji Server is a primary site in the Menedżer konfiguracji system. |
N/A |
The Hardware Inventory Client Agent is on the Menedżer konfiguracji Server. |
For System Center 2012 Configuration Manager, see How to Configure Hardware Inventory in Configuration Manager. For Configuration Manager 2007, see How to Configure Hardware Inventory for a Site. |
One of the following is enabled, depending on the version of Menedżer konfiguracji that you are using:
|
For System Center 2012 Configuration Manager, see Configuring Compliance Settings in Configuration Manager. For Configuration Manager 2007, see Desired Configuration Management Client Agent Properties. |
A reporting services point is defined in Menedżer konfiguracji. Required for SQL Server Reporting Services (SSRS). |
For System Center 2012 Configuration Manager, see Prerequisites for Reporting in Configuration Manager. For Configuration Manager 2007, see How to Create a Reporting Services Point for SQL Reporting Services. |
Configuration Manager 2007 requires Microsoft .NET Framework 2.0 |
The Desired Configuration Management (DCM) Client Agent in Configuration Manager 2007 requires .NET Framework 2.0 to report compliance. Uwaga Installing .NET Framework 3.5 automatically installs .NET Framework 2.0. |
Required permissions to install MBAM with Menedżer konfiguracji
To install MBAM with Menedżer konfiguracji, you must have an administrative user in Menedżer konfiguracji who has a security role with the minimum permissions listed in the following table. The table also shows the rights that you must have, beyond basic computer administrator rights, to install the MBAM Server.
The permissions in the following table apply to both versions of Configuration Manager.
| Permissions | MBAM Server feature |
|---|---|
SQL Server instance login server roles: |
- Recovery Database Uwaga In the Menedżer konfiguracji Integration topology, the database is called just “Audit Database” because it contains only audit data, not compliance data. |
SSRS instance rights: |
- System Center Menedżer konfiguracji Integration |
System Center 2012 Configuration Manager
| Permissions | Menedżer konfiguracji Server feature |
|---|---|
Menedżer konfiguracji site rights: |
System Center Menedżer konfiguracji Integration |
Menedżer konfiguracji collection rights: |
System Center Menedżer konfiguracji Integration |
Menedżer konfiguracji configuration item rights: |
System Center Menedżer konfiguracji Integration |
Configuration Manager 2007
| Permissions | Menedżer konfiguracji Server feature |
|---|---|
Menedżer konfiguracji site rights: |
System Center Menedżer konfiguracji Integration |
Menedżer konfiguracji collection rights: |
System Center Menedżer konfiguracji Integration |
Menedżer konfiguracji configuration item rights: |
System Center Menedżer konfiguracji Integration |
Required changes for the .mof files
To enable the client computers to report BitLocker compliance details through the MBAM Menedżer konfiguracji reports, you have to edit the Configuration.mof file and Sms_def.mof file for System Center 2012 Configuration Manager and Microsoft System Center Configuration Manager 2007. For instructions, see MBAM 2.5 Server Prerequisites that Apply Only to the Configuration Manager Integration Topology.
Got a suggestion for MBAM?
Add or vote on suggestions here. For MBAM issues, use the MBAM TechNet Forum.
Zobacz też
Pojęcia
MBAM 2.5 Server Prerequisites for Stand-alone and Configuration Manager Integration Topologies
Inne zasoby
MBAM 2.5 Server Prerequisites that Apply Only to the Configuration Manager Integration Topology