Prerequisites for the Configuration Manager Integration Feature

If you deploy MBAM with the System Center Configuration Manager Integration topology, we recommend a three-server architecture, as described in High-Level Architecture of MBAM 2.5 with Configuration Manager Integration Topology. This architecture can support 500,000 client computers.

Important
Windows To Go is not supported for the Configuration Manager Integration topology installation when you are using Configuration Manager 2007.

General prerequisites for the Configuration Manager Integration feature

When you install MBAM with Configuration Manager, the following additional prerequisites are required in addition to the prerequisites for the Stand-alone topology.

Prerequisite Additional information

The Configuration Manager Server is a primary site in the Configuration Manager system.

N/A

The Hardware Inventory Client Agent is on the Configuration Manager Server.

For System Center 2012 Configuration Manager, see How to Configure Hardware Inventory in Configuration Manager.

For Configuration Manager 2007, see How to Configure Hardware Inventory for a Site.

One of the following is enabled, depending on the version of Configuration Manager that you are using:

  • Compliance Settings - (System Center 2012 Configuration Manager)

  • Desired Configuration Management (DCM) Client Agent – (Configuration Manager 2007)

For System Center 2012 Configuration Manager, see Configuring Compliance Settings in Configuration Manager.

For Configuration Manager 2007, see Desired Configuration Management Client Agent Properties.

A reporting services point is defined in Configuration Manager. Required for SQL Server Reporting Services (SSRS).

For System Center 2012 Configuration Manager, see Prerequisites for Reporting in Configuration Manager.

For Configuration Manager 2007, see How to Create a Reporting Services Point for SQL Reporting Services.

Configuration Manager 2007 requires Microsoft .NET Framework 2.0

The Desired Configuration Management (DCM) Client Agent in Configuration Manager 2007 requires .NET Framework 2.0 to report compliance.

Note

Installing .NET Framework 3.5 automatically installs .NET Framework 2.0.

Required permissions to install MBAM with Configuration Manager

To install MBAM with Configuration Manager, you must have an administrative user in Configuration Manager who has a security role with the minimum permissions listed in the following table. The table also shows the rights that you must have, beyond basic computer administrator rights, to install the MBAM Server.

The permissions in the following table apply to both versions of Configuration Manager.

Permissions MBAM Server feature

SQL Server instance login server roles: - dbcreator- processadmin

- Recovery Database- Audit Database

SSRS instance rights: - Create Folders- Publish Reports

- System Center Configuration Manager Integration

System Center 2012 Configuration Manager

Permissions Configuration Manager Server feature

Configuration Manager site rights:- Read

System Center Configuration Manager Integration

Configuration Manager collection rights: - Create- Delete- Read- Modify- Deploy Configuration Items

System Center Configuration Manager Integration

Configuration Manager configuration item rights: - Create- Delete- Read

System Center Configuration Manager Integration

Configuration Manager 2007

Permissions Configuration Manager Server feature

Configuration Manager site rights:- Read

System Center Configuration Manager Integration

Configuration Manager collection rights: - Create- Delete- Read- ReadResource

System Center Configuration Manager Integration

Configuration Manager configuration item rights: - Create- Delete- Read- Distribute

System Center Configuration Manager Integration

Required changes for the .mof files

To enable the client computers to report BitLocker compliance details through the MBAM Configuration Manager reports, you have to edit the Configuration.mof file and Sms_def.mof file for System Center 2012 Configuration Manager and Microsoft System Center Configuration Manager 2007. For instructions, see MBAM 2.5 Server Prerequisites that Apply Only to the Configuration Manager Integration Topology.

Got a suggestion for MBAM?

Add or vote on suggestions here. For MBAM issues, use the MBAM TechNet Forum.

MBAM 2.5 Server Prerequisites for Stand-alone and Configuration Manager Integration Topologies

MBAM 2.5 Server Prerequisites that Apply Only to the Configuration Manager Integration Topology