
These GPOs have been removed from the MBAM installer. In previous versions of MBAM, the MBAM installer included an MBAM Policy Template, which contained the required MBAM-specific Group Policy Objects (GPOs) that define MBAM implementation settings for BitLocker Drive Encryption. The MBAM Group Policy Templates must be downloaded separately from the MBAM installation. MBAM Group Policy Templates downloaded separately MBAM adds support for Microsoft SQL Server 2014, in addition to the same software that is supported in earlier versions of MBAM. This section describes the new features in MBAM 2.5. For more information, see BitLocker Drive Encryption Overview. The following groups might be interested in using MBAM to manage BitLocker:Īdministrators, IT security professionals, and compliance officers who are responsible for ensuring that confidential data is not disclosed without authorizationĪdministrators who are responsible for computer security in remote or branch officesĪdministrators who are responsible for client computers that are running WindowsīitLocker is not explained in detail in this MBAM documentation. In addition, MBAM lets you access the recovery key information when users forget their PIN or password, or when their BIOS or boot records change. MBAM enforces the BitLocker encryption policy options that you set for your enterprise, monitors the compliance of client computers with those policies, and reports on the encryption status of the enterprise’s and individual’s computers. Reduces the workload on the Help Desk to assist end users with BitLocker PIN and recovery key requests.Įnables end users to recover encrypted devices independently by using the Self-Service Portal.Įnables security officers to easily audit access to recover key information.Įmpowers Windows Enterprise users to continue working anywhere with the assurance that their corporate data is protected.

Provides centralized reporting and hardware management with Microsoft System Center Configuration Manager. Overview of MBAMĮnables administrators to automate the process of encrypting volumes on client computers across the enterprise.Įnables security officers to quickly determine the compliance state of individual computers or even of the enterprise itself. BitLocker encrypts all data that is stored on the Windows operating system volumes and drives and configured data drives.

BitLocker offers enhanced protection against data theft or data exposure for computers that are lost or stolen. Microsoft BitLocker Administration and Monitoring (MBAM) 2.5 provides a simplified administrative interface for BitLocker Drive Encryption.
