Deploying MBAM 2.0 Group Policy Objects

To successfully deploy Microsoft BitLocker Administration and Monitoring (MBAM), you first have to determine the Group Policies that you will use in your implementation of Microsoft BitLocker Administration and Monitoring. See Planning for MBAM 2.0 Group Policy Requirements for more information on the different policies that are available. When you have determined the policies that you are going to use, you then must create and deploy one or more Group Policy Objects (GPO) that include the policy settings for MBAM by using the MBAM 2.0 Group Policy template.

Install the MBAM 2.0 Group Policy Template

In addition to the server-related Microsoft BitLocker Administration and Monitoring features, the server setup application includes a MBAM Group Policy template. This template can be installed on any computer able to run the Group Policy Management Console (GPMC) or Advanced Group Policy Management (AGPM).

How to Install the MBAM 2.0 Group Policy Template

Deploy MBAM 2.0 Group Policy Settings

After you create the necessary GPOs, you must deploy the MBAM Group Policy settings to your organization’s client computers.

How to Edit MBAM 2.0 GPO Settings

Display the MBAM Control Panel in Windows

Because MBAM offers a customized MBAM control panel that can replace the default Windows BitLocker control panel, you can also choose to hide the default BitLocker Control Panel from end users by using Group Policy.

How to Hide Default BitLocker Encryption in the Windows Control Panel

Other Resources for Deploying MBAM 2.0 Group Policy Objects

Deploying MBAM 2.0