MBAM BitLocker Administration and Monitoring: Clients not reporting status.
I am having some issues getting the BitLocker Management Client Service to report into the MBAM Compliance Status Service. I have run into the normal issues. Now I am faced with some very strange behaviors and I am hoping someone else has found the solution. I have the MBAM GPOs Deployed, and the Client installed. The system is BitLockered, however they client doesnt report in. On a machine that is reporting successfully there are 2 events: Source: Microsoft-Windows-MBAMEvent ID: 1Description: The MBAM policies were applied successfully. Volume ID:\\?\Volume{Unique ID}\Event ID: 3Description: The encryption status data was sent successfully. Eventually Event 1 is dropped and only Event 3 is listed. The remaining systems are having a different issue. Source: Microsoft-Windows-MBAMEvent ID: 1Description: The MBAM policies were applied successfully. Volume ID:\\?\Volume{Unique ID}\ This occurs at every scheduled interval and I cannot seem to resolve it consistantly. "NoStartupDelay, DeploymentTime, ClientWakeUpFrequency, and StatusReportingFrequency =1" steps (MBAM Clients Not Reporting) haven't fixed the issue. There are no additional errors in the event logs so I am at a loss of where to go next? Here is my This_and_the_Kitchen_Sink script. Is there something else I could be missing. ~450 are working fine, the remaining 3000+ systems won't show up. NET STOP "BitLocker Management Client Service"REG ADD "HKLM\SOFTWARE\Microsoft\MBAM" /V NoStartupDelay /D 1 /T REG_DWORD /FREG ADD "HKLM\SOFTWARE\Microsoft\MBAM" /V DeploymentTime /D 1 /T REG_DWORD /FREG ADD "HKLM\SOFTWARE\Policies\Microsoft\FVE\MDOPBitLockerManagement" /V ClientWakeupFrequency /D 1 /T REG_DWORD /FREG ADD "HKLM\SOFTWARE\Policies\Microsoft\FVE\MDOPBitLockerManagement" /V StatusReportingFrequency /D 1 /T REG_DWORD /FNET START "BitLocker Management Client Service"REG DELETE "HKLM\SOFTWARE\Microsoft\MBAM" /V NoStartupDelay /FREG DELETE "HKLM\SOFTWARE\Microsoft\MBAM" /V DeploymentTime /FREG ADD "HKLM\SOFTWARE\Policies\Microsoft\FVE\MDOPBitLockerManagement" /V ClientWakeupFrequency /D 180 /T REG_DWORD /FREG ADD "HKLM\SOFTWARE\Policies\Microsoft\FVE\MDOPBitLockerManagement" /V StatusReportingFrequency /D 180 /T REG_DWORD /F
March 4th, 2012 9:58pm

Hi, Is the script written by yourself or download from somewhere else? I have a download link for MBAM related document. Hope can help you a little: MBAM document resource (http://www.microsoft.com/downloads/details.aspx?FamilyID=A2C39653-C570-417F-82E5-806551FBE97A&displaylang=e&displaylang=en) Thanks, Spencer ShiPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
March 8th, 2012 5:50am

Heya, The script is written by me, but it is a compilation of related posts by many people. I have read through every document in your link, and then some. It seems to be a very common response to all issues posted to the forums. I was hoping someone might be able to tell me if I was overlooking something obvious. Integrating this with SCCM has been a challenge but I have found several other Undocumented requirements that really help get this tool working. I am now at 96% success, but the default installation was inadequate to get to this level of completion.
March 8th, 2012 12:19pm

1. If I understand this case correctly, you could see the Bitlocker Recovery keys in MBAM Recovery & Hardware DB but compliance status is not in the MBAM compliance DB. 2. Did you verify from SQL DB that there is no information in SQL DB? 3. Make sure you have single compliance DB and this information can be verified from SQL Management studio. If you have done reinstall of MBAM%Manoj Sehgal
Free Windows Admin Tool Kit Click here and download it now
March 14th, 2012 5:14am

1. If I understand this case correctly, you could see the Bitlocker Recovery keys in MBAM Recovery & Hardware DB but compliance status is not in the MBAM compliance DB. 2. Did you verify from SQL DB that there is no information in SQL DB? 3. Make sure you have single compliance DB and this information can be verified from SQL Management studio. If you have done reinstall of MBAM, verify in MaltaDatasource correct DataSource is used. http://support.microsoft.com/kb/2639518 For MBAM integration with SCCM we have released the below blog. http://blogs.technet.com/b/deploymentguys/archive/2012/02/20/using-mbam-to-start-bitlocker-encryption-in-a-task-sequence.aspx Let me know if this helps or not. -Manoj Manoj Sehgal
March 14th, 2012 5:15am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics