MBAM Status reporting service endpoint: Enter status report frequency in (minutes): 720 MBAM Recovery service endpoint: Select BitLocker recovery information to store: Recovery password and key packageĮnter client checking status frequency in (minutes): 90Ĭonfigure MBAM Status reporting service: Enabled GPO Path – MDOP MBAM (BitLocker Management)/BitLocker Drive Encryption/Client Management Configure MBAM services Select the encryption method: AES 256-bit Select the encryption method for removable data drives: XTS-AES 256-bit Select the encryption method for fixed data drives: XTS-AES 256-bit
Select the encryption method for operating system drives: XTS-AES 256-bit GPO Path – MDOP MBAM (BitLocker Management) SettingĬhoose drive encryption method and cipher strength. The BitLocker recovery page provides Helpdesk contact informationīelow are all of the settings contained within my demo example.The use of passwords (non-TPM) is blocked.For this example I am going to require the following settings Open the newly created GPO and expand to Computer Configuration\Policies\Administrative Templates\Windows Components\MDOP MBAM (BitLocker Management) Ĭonfiguring the GPO is going to depend on your requirements, whether or not you are going to apply BitLocker to encrypt removable drives and so on.Create a new Group Policy object and name it according to your naming convention.Open Group Policy Management Editor or the Advanced Group Policy Management console (depending on your environment).The first thing you will need to do is to update your policy central store with the MBAM ADMX group policy files which can be downloaded from Microsoft – h ttps://Now let us step through creating a new GPO for the Windows clients Part 4: Validation of key storage and recovery tests Group Policy ConfigurationĪll settings for MBAM client deployments are configured through Group Policy. Part 3: Configuration of GPO policies and client agent deployment Part 2: Validating IIS sites and customisation In this the third part, we will look at how client GPO policies are configured and how to push out the MBAM Client Agent via Systems Center Configuration Manager (ConfigMgr)
In parts 1 & 2 of this series of posts on installing and configuring Microsoft Bitlocker Administration and Monitoring (MBAM) we ran through the installation, validation and customisation options available.
0 kommentar(er)
