Editing the MBAM 2.5 Group Policy Settings
To successfully deploy Microsoft BitLocker Administration and Monitoring (MBAM), you have to:
Copy the MBAM 2.5 Group Policy Templates.
Determine which Group Policy Objects (GPOs) you want to use in your MBAM implementation. Based on the needs of your organization, you might have to configure additional Group Policy settings.
Planning for MBAM 2.5 Group Policy Requirements – contains descriptions of the GPOs
Set the Group Policy settings for your organization.
Do not change the Group Policy settings in the BitLocker Drive Encryption node, or MBAM will not work correctly. When you configure the Group Policy settings in the MDOP MBAM (BitLocker Management) node, MBAM automatically configures the BitLocker Drive Encryption settings for you.
To edit MBAM Client Group Policy settings
On a computer that has the MBAM Group Policy Templates installed, make sure that MBAM Services are enabled.
Using the Group Policy Management Console (GPMC.msc) or the Microsoft Advanced Group Policy Management MDOP product on a computer with the MBAM Group Policy Templates installed, select Computer configuration > Policies > Administrative Templates > Windows Components > MDOP MBAM (BitLocker Management).
Edit the Group Policy settings that are required to enable MBAM Client services on client computers. For each policy in the following table, select Policy Group, click the Policy you want, and then configure the settings.
Policy Group Policy
Configure MBAM Services
Operating System Drive
Operating system drive encryption settings
Control use of BitLocker on removable drives
Control use of BitLocker on fixed drives