Similarly, existing MBAM deployments require rollup to be installed followed by removal and then re-addition of features via MBAM wizard. The reason is rollups for MBAM only take effect when the add feature wizard is run (This will ensure you're up-to-date from the start). On a fresh deployment, install MBAM immediately followed by latest rollup, before configuring MBAM. MBAM Database configuration – minimum permissions – detailed explanation of SQL permissions, review before MBAM configuration TIPS How to Deploy the MBAM Client as Part of a Windows Deployment automate, automate, automateĮvaluating MBAM 2.5 in a Test Environment – configures MBAM client to check in every minute which can be very helpful MBAM version chart provides clear understanding of patch levels for MBAM.Ĭommon Troubleshooting Issues Encountered When Configuring MBAM 2.5 (Thank you Bill Spears)

Do yourself a favor and DO NOT skip any steps. Please ensure on Windows 10 client to check 'Enable Secure Boot' and 'Enable Trusted Platform Module.' (*MBAM and encryption within VMs is for evaluation only)ĭeploying MBAM 2.5 in a stand-alone configuration provides step-by-step with videos. As a result, I can evaluate and deploy MBAM without any hardware requirements (which is awesome). Additionally, I have a Domain Controller, MBAM Server and Windows 10 Client (vTPM). Important to note, this is only available in generation 2 virtual machines. I'm using Windows Server 2016 as a Hyper-V host which supports UEFI and virtual Trusted Platform Module (TPM). Like most, I always evaluate products in my lab first as to accelerate overall learning process and better forecast production requirements. As a result, it's important to set expectations up front regarding collaboration needs with other teams as this may be required. MBAM has dependencies on SQL Server, IIS web services and Active Directory. Hopefully these tips will save you time and accelerate future MBAM deployments. The goal of this blog is to share some information learned (the hard way) from recent customer engagement.

Mbam windows