It’s not that long ago since Microsoft released 1908.2 but now at the end of September they’ve released another great Technical Preview, this time version 1909. To see what’s new and what features it introduces click here.
Earlier this year I blogged about the new BitLocker Management abilities coming to ConfigMgr and this release adds even more features and abilities in that area such as long awaited SelfService and Helpdesk functions. If you want to see those new abilities right away then scroll down to What’s new with MBAM.
To get TP1909, open your Configuration Manager console and click on the Check for updates button in the ribbon.
This release is packed with new features, so let’s look at a few of them.
There are a bunch or new reports for MBAM located in the Reporting node.
However when I tried to run any of them I got an error, I’ve alerted the Microsoft Product Group about this.
To use the MBAM self service, you’ll need to do some manual actions on the Primary site server.
- Copy the following files from
SMSSETUP\BIN\X64to a local folder:
- Run PowerShell as an administrator, and then run the script similar to the following command line:
.\MBAMWebSiteInstaller.ps1 -SqlServerName <ServerName> -SqlInstanceName <InstanceName> -SqlDatabaseName <DatabaseName> -ReportWebServiceUrl <ReportWebServiceUrl> -HelpdeskUsersGroupName <DomainUserGroup> -HelpdeskAdminsGroupName <DomainUserGroup> -MbamReportUsersGroupName <DomainUserGroup> -SiteInstall Both
So let’s try it ! I browsed to the location of the EasySetupPayload on my primary and that was D:\Program Files\Microsoft Configuration Manager\EasySetupPayload\dc84dd4c-0f5a-4fb1-8e52-c0a64acaec75\SMSSETUP\BIN\X64
The GUID in red will change depending on what version of Update you are working with.
PS C:\Temp\MBAM> .\MBAMWebSiteInstaller.ps1 -SqlServerName CM01.windowsnoob.lab.local -SqlDatabaseName CM_P01 -ReportWebServiceUrl http://CM01.windowsnoob.lab.local/Reportserver -HelpdeskUsersGroupName windowsnoob\mbam_hd -HelpdeskAdminsGroupName windowsnoob\MBAM_HD_ADV -MbamReportUsersGroupName windowsnoob\MBAM_HD_Report -SiteInstall Both
And after running the script…the self service notice page is shown when visiting https://cm01.windowsnoob.lab.local/SelfService
And to change from Contoso IT to your company name, do as follows:
And here’s the self service itself.
Related (MBAM) reading
- On-premises BitLocker management using System Center Configuration Manager
- How can I get BitLocker Recovery Keys from the ConfigMgr database
- How to fix: “Unable to find suitable Recovery Service MP. Marking policy non-compliant”
- How does Key Rotation work in MBAM integrated with SCCM ?
- How can you use the Self Service feature when MBAM is integrated within SCCM?
- How can you use the Help Desk feature when MBAM is integrated within SCCM?
What about OSD ?
You can now customize Language Settings in an OSD task sequence in the Apply Windows Settings step ! however this is currently limited to newly created task sequences, if you try to edit an existing task sequence with this feature then it will crash (should be fixed in 1910).