How to Use the Help Desk Portal
The MBAM Administration and Monitoring website, also referred to as the Help Desk Portal, is an administrative interface to BitLocker drive encryption that is installed as part of the Microsoft BitLocker Administration and Monitoring (MBAM) server infrastructure. The following sections describe how you can use this website to review reports, recover end users’ drives, and manage end users’ TPMs.
Reports
MBAM collects information from Active Directory and client computers, which enables you to run different reports to monitor BitLocker usage and compliance. Using the Reports section of the Administration and Monitoring website, you can generate reports on enterprise compliance, individual computers, and key recovery activity. For a description of each report, see Understanding MBAM Reports.
To access reports
Open a web browser and navigate to the MBAM Administration and Monitoring website.
Select Reports in the left pane.
From the top menu bar, select the report type you want to generate. To save reports, click the Export button on the Reports menu bar.
For additional information about how to run MBAM reports, see How to Generate MBAM Reports.
Drive Recovery
The Drive Recovery feature of the Administration and Monitoring website allows users with specific administrator roles (for example, Help Desk Users) to access recovery key data that has been collected by the MBAM Client. This data can be used to access a BitLocker-protected drive when BitLocker goes into recovery mode. For instructions on how to recover a drive that is in recovery mode, see How to Recover a Drive in Recovery Mode.
You can also recover drives that have been moved or that are corrupted:
For additional information about how to recover a BitLocker-protected drive, see Performing BitLocker Management with MBAM.
Manage TPM
The Manage TPM feature of the Administration and Monitoring website gives users with certain administrator roles (for example, “MBAM Helpdesk Users”) access to TPM data that has been collected by the MBAM Client. In a TPM lockout, an administrator can use the Administration and Monitoring website to retrieve the necessary password file to unlock the TPM. For instructions on how to reset a TPM after a TPM lockout, see How to Reset a TPM Lockout.
MBAM Help Desk Tasks
You can use the Administration and Monitoring website for many administrative tasks, such as managing BitLocker-protected hardware, recovering drives, and running reports. By default, the URL for the Administration and Monitoring website is http://<MBAMAdministrationServername>, although you can customize it during the installation process.
Note To access the various features offered by the Administration and Monitoring website, you must have the appropriate roles associated with your user account. For more information about understanding user roles, see How to Manage MBAM Administrator Roles.
Use the following links to find information about the tasks that you can perform by using the Administration and Monitoring website: