

While SCCM is an on-premises option, MEM is a cloud-native solution that includes several tools and services for managing and monitoring mobile devices, desktop computers, virtual machines, embedded devices, and servers.

Microsoft provides two other BitLocker management alternatives through System Center Configuration Manager (SCCM) and Microsoft Endpoint Manager (MEM). However, after the mainstream support for MBAM ended in 2019, enterprises are exploring other options to simplify the administration of Windows devices. Many enterprises use Microsoft BitLocker Administration and Monitoring (MBAM) to simplify the management and monitoring of the enterprise Windows devices. Windows machines use BitLocker for encrypting data stored in operating system volumes and drives. Guide of how to apply MBAM 2.How to Migrate MBAM to Microsoft Endpoint Manager? Get help in choosing a deployment method for MBAM, including step-by-step instructions for each method. Using Windows PowerShell to Administer MBAM 2.5įind documentation, videos, and other resources for MDOP technologies.Performing BitLocker Management with MBAM 2.5.Monitoring and Reporting BitLocker Compliance with MBAM 2.5.Removing MBAM Server Features or Software.Upgrading to MBAM 2.5 or MBAM 2.5 SP1 from Previous Versions.Deploying MBAM 2.5 Group Policy Objects.Deploying the MBAM 2.5 Server Infrastructure.Planning for MBAM 2.5 High Availability.Planning How to Secure the MBAM Websites.Planning for MBAM 2.5 Groups and Accounts.Planning for MBAM 2.5 Group Policy Requirements.Preparing your Environment for MBAM 2.5.Evaluating MBAM 2.5 in a Test Environment.For more information, see Monitor device encryption with Intune. For more information, see Plan for BitLocker management.Ĭustomers not using Microsoft Configuration Manager can utilize the built-in features of Azure AD and Microsoft Intune for administration and monitoring of BitLocker. Going forward, the functionality of MBAM has been incorporated into Microsoft Configuration Manager as Microsoft Configuration Manager BitLocker Management. Customers who are in extended support can obtain MBAM by seeing How Do I Get MDOP. Enterprises can use Microsoft BitLocker Administration and Monitoring (MBAM) to manage client computers with BitLocker that are domain-joined on-premises until mainstream support ends in July 2019 or they can receive extended support until April 2026.
