Microsoft released SCCM TP 1905 and it has to be one of their finest ConfigMgr releases yet, with so many new features it was hard to decide which would get my focus, but On-premises BitLocker Management was there so I focused on that.įor those that don't know Microsoft BitLocker Administration and Monitoring (MBAM) is an ability to have a client agent (the MDOP MBAM agent) on your Windows devices (7,8 10) to enforce BitLocker encryption and to store the recovery keys in your database. īitLocker management – Part 1 Initial setupīitLocker management – Part 2 Deploy portalsīitLocker management – Part 3 Customize portalsīitLocker management – Part 4 Force encryption with no user actionīitLocker management – Part 5 key rotationīitLocker management – Part 6 Force decryption with no user actionīitLocker management – Part 7 Reporting and complianceīitLocker management – Part 9 Group Policy settingsīitLocker management – Part 10 Troubleshooting They have now released Microsoft Endpoint Manager Configuration Manager version 1910, with the Bitlocker Management feature integrated, I cover that in detail here.

This guide was originally written when Microsoft were still developing Bitlocker Management integration.

Mbam bitlocker