Table of contents
Collapse the table of content
Expand the table of content

Administering MBAM 1.0 by Using PowerShell

jamiejdt|Last Updated: 6/16/2016
1 Contributor

Microsoft BitLocker Administration and Monitoring (MBAM) provides the following listed set of Windows PowerShell cmdlets. Administrators can use these PowerShell cmdlets to perform various MBAM server tasks from the command prompt rather than from the MBAM administration website.

How to administer MBAM by using PowerShell

Use the PowerShell cmdlets described here to administer MBAM.



Adds a new hardware model to the MBAM hardware inventory. This cmdlet can also specify whether the hardware is supported or unsupported for BitLocker drive encryption.


Requests an MBAM recovery key that will enable a user to unlock a computer or encrypted drive.


Gets a master hardware inventory that contains data that indicates whether hardware models are compatible or incompatible with BitLocker drive encryption.


Provides a TPM owner password for a user to manage their TPM (Trusted Platform Module) access. Helps users when TPM has locked them out and will no longer accept their PIN.


Installs MBAM features that provide advanced group policy, encryption, key recovery, and compliance reporting tools.


Removes the hardware models from the hardware inventory.


Allows management of a master hardware inventory to designate whether or not hardware models are capable or incapable to perform BitLocker encryption.


Removes previously installed MBAM features that provide advanced policy, encryption, key recovery, and compliance reporting tools.

Operations for MBAM 1.0

© 2016 Microsoft