MBAM FAQ

Below are frequently asked questions relating to MBAM usage, and corresponding solutions/answers.

Question Answer
How long does it take for a system to show up as compliant on MBAM Reports? Within 24 hours after the system has completed the encryption of the hard drives.
What do I need to do if my system is already encrypted with BitLocker encryption and I want to install the MBAM client to get its benefits? You will need to un-encrypt the system and then install the MBAM client using the Manual method.
Can I run the MBAM client without utilizing Domain Group Policies? No.The MBAM Group Policy settings do not exist in the Local Group Policy settings on client systems.
Can I apply the MBAM Default GPO to non-TPM Windows Workstations? No. The MBAM Group Policy is the MBAM Compliance definition for the Windows Workstations it is applied to. Applying the incorrect GPO will result in a non-compliance status in MBAM Reports as the system will be missing the TPM Protector.
If I apply the MBAM Default GPO to my non-TPM Windows Workstations will my Windows Workstation encrypt? Not without manually editing local Group Policy settings on the Windows Workstation which is not recommended or supported.
Can I run the MBAM client without being joined to a supported Northwestern Domain? No. The MBAM Client requires Domain Group Policies to run.
Can I run the MBAM client without a TPM Chip 1.2 or greater? Yes. To run without a TPM Chip 1.2 or greater you will need to be running Windows 8.1 for the Operating System and apply the Non-TPM MBAM Domain Group Policy. This will require you to type in a BitLocker password to boot your computer up.
Can I run Apple OS X natively and Windows 8.1 natively on the same Apple computer with MBAM and FileVault2 enabled on a single Hard Drive? No. Due to hardware limitation of Hard Drive partitioning you cannot run both OSes natively on the same Apple hardware with a single Hard Drive.
Can I run Apple OS X natively and Windows virtually on the same Apple computer with FileVault2 enabled for encryption on a single Hard Drive? Yes. As long as the Virtualized Windows is running on a Virtualized Hard Disk (.VHD file) and not running on an Apple Boot Camp partition.
Can MBAM protect the OS X partitions on Apple Hardware? No. MBAM can only protects the Windows partitions on Apple Hardware.
Can FileVault2 protect an Apple BootCamp partition for a Windows install on Apple Hardware? No. FileVault2 only protects the OS X partitions on Apple Hardware.
Will BitLocker to Go protected External Drives work on non-Windows OSes? No. BitLocker to Go is designed to only work on Windows OSes.
Does the MBAM Client support Windows 7 without a TPM using a USB Key? No. The MBAM Client does not support encryption with a USB Key.



Keywords:mbam faq, bitlocker, bitlocker faq   Doc ID:67637
Owner:TSS Endpoint Management .Group:Northwestern
Created:2016-10-07 11:10 CDTUpdated:2019-02-04 11:59 CDT
Sites:Northwestern
Feedback:  0   0