In this series of posts I am going to run through the process of setting up MBAM, deploying the agent and group policies out to clients, customisation of the self service portal and troubleshooting.

Microsoft are no doubt looking to move people to a cloud delivered solution but until the shortcomings that are there are addressed, MBAM will continue to be deployed by organisations. Many of you might pose the question of why? is MBAM not a legacy product? can you not store recovery keys in Active Directory or Azure Active Directory instead?.įor many companies simply storing the key in a repository that requires their IT helpdesk staff to have elevated Active Directory or Azure Active Directory rights is not something they want to do, so providing both self service and a dedicated helpdesk portal is the best option for them.Īside from the portal issue the other main benefit for deploying MBAM in your environment is of course the key rollover process that occurs post recovery. Over the past number of months I have had several engagements as a consultant to implement Microsoft BitLocker Administration and Monitoring (MBAM).

Bitlocker management sccm