deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 21:37:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Merged PR 9127: Table fixes

Browse Source
This commit is contained in:
Liza Poggemeyer 2018-06-16 00:51:01 +00:00
parent 973d18a9b8
commit f28e196aef
4 changed files with 122 additions and 368 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

73
mdop/appv-v5/how-to-deploy-the-app-v-50-server-using-a-script.md
View File

@ -7,7 +7,7 @@ ms.pagetype: mdop, appcompat, virtualization
ms.mktglfcycl: deploy ms.mktglfcycl: deploy
ms.sitesec: library ms.sitesec: library
ms.prod: w10 ms.prod: w10
ms.date: 06/16/2016 ms.date: 06/15/2018
--- ---
@ -16,16 +16,15 @@ ms.date: 06/16/2016
In order to complete the **appv\_server\_setup.exe** Server setup successfully using the command line, you must specify and combine multiple parameters. In order to complete the **appv\_server\_setup.exe** Server setup successfully using the command line, you must specify and combine multiple parameters.
**To Install the App-V 5.0 server using a script** Use the following tables for more information about installing the App-V 5.0 server using the command line.
- Use the following tables for more information about installing the App-V 5.0 server using the command line. >[!NOTE]  
>The information in the following tables can also be accessed using the command line by typing the following command:
>```
> appv\_server\_setup.exe /?
>```
**Note**   ## Common parameters and Examples
The information in the following tables can also be accessed using the command line by typing the following command: **appv\_server\_setup.exe /?**.
 
**Common parameters and Examples**
<table> <table>
<colgroup> <colgroup>
@ -67,9 +66,7 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tr> </tr>
</tbody> </tbody>
</table> </table>
   
<table> <table>
<colgroup> <colgroup>
<col width="50%" /> <col width="50%" />
@ -109,9 +106,7 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
<p>/EXISTING_MANAGEMENT_DB_NAME =”AppVManagement”</p></td> <p>/EXISTING_MANAGEMENT_DB_NAME =”AppVManagement”</p></td>
</tr> </tr>
</tbody> </tbody>
</table> </table>  
 
<table> <table>
<colgroup> <colgroup>
@ -153,9 +148,7 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tr> </tr>
</tbody> </tbody>
</table> </table>
   
<table> <table>
<colgroup> <colgroup>
<col width="50%" /> <col width="50%" />
@ -191,8 +184,6 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tbody> </tbody>
</table> </table>
 
<table> <table>
<colgroup> <colgroup>
<col width="50%" /> <col width="50%" />
@ -228,8 +219,6 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tbody> </tbody>
</table> </table>
 
<table> <table>
<colgroup> <colgroup>
<col width="50%" /> <col width="50%" />
@ -255,8 +244,6 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tbody> </tbody>
</table> </table>
 
<table> <table>
<colgroup> <colgroup>
<col width="50%" /> <col width="50%" />
@ -298,8 +285,6 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tbody> </tbody>
</table> </table>
 
<table> <table>
<colgroup> <colgroup>
<col width="50%" /> <col width="50%" />
@ -339,8 +324,6 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tbody> </tbody>
</table> </table>
 
<table> <table>
<colgroup> <colgroup>
<col width="50%" /> <col width="50%" />
@ -380,8 +363,6 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tbody> </tbody>
</table> </table>
 
<table> <table>
<colgroup> <colgroup>
<col width="50%" /> <col width="50%" />
@ -417,8 +398,6 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tbody> </tbody>
</table> </table>
 
<table> <table>
<colgroup> <colgroup>
<col width="50%" /> <col width="50%" />
@ -454,11 +433,9 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tbody> </tbody>
</table> </table>
  ## Parameter Definitions
**Parameter Definitions** ### General Parameters
**General Parameters**
<table> <table>
<colgroup> <colgroup>
@ -503,9 +480,7 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tbody> </tbody>
</table> </table>
  ### Management Server Installation Parameters
**Management Server Installation Parameters**
<table> <table>
<colgroup> <colgroup>
@ -538,9 +513,7 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tbody> </tbody>
</table> </table>
  ### Parameters for the Management Server Database
**Parameters for the Management Server Database**
<table> <table>
<colgroup> <colgroup>
@ -585,9 +558,7 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tbody> </tbody>
</table> </table>
  ### Parameters for Installing Publishing Server
**Parameters for Installing Publishing Server**
<table> <table>
<colgroup> <colgroup>
@ -620,9 +591,7 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tbody> </tbody>
</table> </table>
  ### Parameters for Reporting Server
**Parameters for Reporting Server**
<table> <table>
<colgroup> <colgroup>
@ -653,7 +622,7 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
   
**Parameters for using an Existing Reporting Server Database** ### Parameters for using an Existing Reporting Server Database
<table> <table>
<colgroup> <colgroup>
@ -690,9 +659,7 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tbody> </tbody>
</table> </table>
  ### Parameters for installing Reporting Server Database
**Parameters for installing Reporting Server Database**
<table> <table>
<colgroup> <colgroup>
@ -733,9 +700,7 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tbody> </tbody>
</table> </table>
  ### Parameters for using an existing Management Server Database
**Parameters for using an existing Management Server Database**
<table> <table>
<colgroup> <colgroup>
@ -773,12 +738,10 @@ In order to complete the **appv\_server\_setup.exe** Server setup successfully u
</tr> </tr>
</tbody> </tbody>
</table> </table>
   
## Related topics ## Related topics
[Deploying the App-V 5.0 Server](deploying-the-app-v-50-server.md) [Deploying the App-V 5.0 Server](deploying-the-app-v-50-server.md)
   

171
mdop/mbam-v25/how-to-move-the-mbam-25-databases.md
View File

@ -7,7 +7,7 @@ ms.pagetype: mdop, security
ms.mktglfcycl: manage ms.mktglfcycl: manage
ms.sitesec: library ms.sitesec: library
ms.prod: w10 ms.prod: w10
ms.date: 05/23/2018 ms.date: 06/15/2018
--- ---
# How to Move the MBAM 2.5 Databases # How to Move the MBAM 2.5 Databases
@ -64,8 +64,8 @@ The high-level steps for moving the Recovery Database are:
To automate this procedure, you can use Windows PowerShell to enter a command that is similar to the following: To automate this procedure, you can use Windows PowerShell to enter a command that is similar to the following:
```syntax ```powershell
PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring" Stop-Website "Microsoft BitLocker Administration and Monitoring"
``` ```
@ -130,8 +130,8 @@ PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring"
4. In Windows PowerShell, run the script that is stored in the file and similar to the following: 4. In Windows PowerShell, run the script that is stored in the file and similar to the following:
```syntax ```powershell
PS C:\> Invoke-Sqlcmd -InputFile Invoke-Sqlcmd -InputFile
'Z:\BackupMBAMRecoveryandHardwarDatabaseScript.sql' -ServerInstance $SERVERNAME$\$SQLINSTANCENAME$ 'Z:\BackupMBAMRecoveryandHardwarDatabaseScript.sql' -ServerInstance $SERVERNAME$\$SQLINSTANCENAME$
``` ```
5. Use the following value to replace the values in the code example with values that match your environment: 5. Use the following value to replace the values in the code example with values that match your environment:
@ -144,24 +144,24 @@ Use Windows Explorer to move the **MBAM Compliance Status Database Data.bak** fi
To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following: To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following:
```syntax ```powershell
PS C:\> Copy-Item “Z:\MBAM Recovery Database Data.bak” Copy-Item “Z:\MBAM Recovery Database Data.bak”
\\$SERVERNAME$\$DESTINATIONSHARE$ \\$SERVERNAME$\$DESTINATIONSHARE$
PS C:\> Copy-Item “Z:\SQLServerInstanceCertificateFile” Copy-Item “Z:\SQLServerInstanceCertificateFile”
\\$SERVERNAME$\$DESTINATIONSHARE$ \\$SERVERNAME$\$DESTINATIONSHARE$
PS C:\> Copy-Item “Z:\SQLServerInstanceCertificateFilePrivateKey” Copy-Item “Z:\SQLServerInstanceCertificateFilePrivateKey”
\\$SERVERNAME$\$DESTINATIONSHARE$ \\$SERVERNAME$\$DESTINATIONSHARE$
``` ```
Use the information in the following table to replace the values in the code example with values that match your environment. Use the information in the following table to replace the values in the code example with values that match your environment.
| **Parameter** | **Description** | | **Parameter** | **Description** |
|----------------------|---------------------------------------------------------------| |----------------------|------------------|
| $SERVERNAME$ | Name of the server to which the files will be copied. | | $SERVERNAME$ | Name of the server to which the files will be copied. |
| $DESTINATIONSHARE$ | Name of the share and path to which the files will be copied. | | $DESTINATIONSHARE$ | Name of the share and path to which the files will be copied. |
|---|---|
### Restore the Recovery Database on Server B ### Restore the Recovery Database on Server B
@ -173,7 +173,7 @@ Use the information in the following table to replace the values in the code exa
4. To automate this procedure, create a SQL file (.sql) that contains the following SQL script: 4. To automate this procedure, create a SQL file (.sql) that contains the following SQL script:
```syntax ```
-- Restore MBAM Recovery Database. -- Restore MBAM Recovery Database.
USE master USE master
@ -219,8 +219,8 @@ Use the information in the following table to replace the values in the code exa
6. In Windows PowerShell, run the script that is stored in the file and similar to the following: 6. In Windows PowerShell, run the script that is stored in the file and similar to the following:
```syntax ```powershell
PS C:\> Invoke-Sqlcmd -InputFile 'Z:\RestoreMBAMRecoveryandHardwarDatabaseScript.sql' -ServerInstance $SERVERNAME$\$SQLINSTANCENAME$ Invoke-Sqlcmd -InputFile 'Z:\RestoreMBAMRecoveryandHardwarDatabaseScript.sql' -ServerInstance $SERVERNAME$\$SQLINSTANCENAME$
``` ```
7. Use the following value to replace the values in the code example with values that match your environment. 7. Use the following value to replace the values in the code example with values that match your environment.
@ -245,19 +245,19 @@ Use the information in the following table to replace the values in the code exa
6. To automate this process, you can use the Windows PowerShell command prompt to enter a command line on the Administration and Monitoring Server that is similar to the following: 6. To automate this process, you can use the Windows PowerShell command prompt to enter a command line on the Administration and Monitoring Server that is similar to the following:
```syntax ```powershell
PS C:\> reg add "HKEY_LOCAL_MACHINE\SOFTWARE\\Microsoft\MBAM Server\\Web" /v reg add "HKEY_LOCAL_MACHINE\SOFTWARE\\Microsoft\MBAM Server\\Web" /v
RecoveryDBConnectionString /t REG_SZ /d "Integrated Security=SSPI;Initial RecoveryDBConnectionString /t REG_SZ /d "Integrated Security=SSPI;Initial
Catalog=$DATABASE$;Data Source=$SERVERNAME$\$SQLINSTANCENAME$" /f Catalog=$DATABASE$;Data Source=$SERVERNAME$\$SQLINSTANCENAME$" /f
PS C:\> Set-WebConfigurationProperty Set-WebConfigurationProperty
'connectionStrings/add[@name="KeyRecoveryConnectionString"]' -PSPath 'connectionStrings/add[@name="KeyRecoveryConnectionString"]' -PSPath
"IIS:\sites\Microsoft Bitlocker Administration and "IIS:\sites\Microsoft Bitlocker Administration and
Monitoring\MBAMAdministrationService" -Name "connectionString" -Value “Data Monitoring\MBAMAdministrationService" -Name "connectionString" -Value “Data
Source=$SERVERNAME$\$SQLINSTANCENAME$;Initial Catalog=MBAM Recovery and Source=$SERVERNAME$\$SQLINSTANCENAME$;Initial Catalog=MBAM Recovery and
Hardware;Integrated Security=SSPI;” Hardware;Integrated Security=SSPI;”
PS C:\> Set-WebConfigurationProperty Set-WebConfigurationProperty
'connectionStrings/add[\@name="Microsoft.Mbam.RecoveryAndHardwareDataStore.ConnectionString"]' 'connectionStrings/add[\@name="Microsoft.Mbam.RecoveryAndHardwareDataStore.ConnectionString"]'
-PSPath "IIS:\sites\Microsoft Bitlocker Administration and -PSPath "IIS:\sites\Microsoft Bitlocker Administration and
Monitoring\MBAMRecoveryAndHardwareService" -Name "connectionString" -Value Monitoring\MBAMRecoveryAndHardwareService" -Name "connectionString" -Value
@ -271,52 +271,11 @@ Use the information in the following table to replace the values in the code exa
7. Use the following table to replace the values in the code example with values that match your environment. 7. Use the following table to replace the values in the code example with values that match your environment.
```html |Parameter|Description|
<table> |---------|-----------|
|$SERVERNAME$/\$SQLINSTANCENAME$|Server name and instance of SQL Server where the Recovery Database is located.|
|$DATABASE$|Name of the Recovery database.|
<colgroup>
<col width="50%" />
<col width="50%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Parameter</th>
<th align="left">Description</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>$SERVERNAME$\$SQLINSTANCENAME$</p></td>
<td align="left"><p>Server name and instance of SQL Server where the Recovery Database is located.</p></td>
</tr>
<tr class="even">
<td align="left"><p>$DATABASE$</p></td>
<td align="left"><p>Name of the Recovery database.</p></td>
</tr>
</tbody>
</table>
```
### Install MBAM Server software and run the MBAM Server Configuration wizard on Server B ### Install MBAM Server software and run the MBAM Server Configuration wizard on Server B
@ -334,8 +293,8 @@ On the server that is running the Administration and Monitoring Website, use the
To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following: To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following:
```syntax ```powershell
PS C:\> Start-Website "Microsoft BitLocker Administration and Monitoring" Start-Website "Microsoft BitLocker Administration and Monitoring"
``` ```
>[!NOTE] >[!NOTE]
@ -366,8 +325,8 @@ The high-level steps for moving the Compliance and Audit Database are:
To automate this procedure, you can use Windows PowerShell to enter a command that is similar to the following: To automate this procedure, you can use Windows PowerShell to enter a command that is similar to the following:
```syntax ```powershell
PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring" Stop-Website "Microsoft BitLocker Administration and Monitoring"
``` ```
@ -380,8 +339,7 @@ PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring"
2. To automate this procedure, create a SQL file (.sql) that contains the following SQL script: 2. To automate this procedure, create a SQL file (.sql) that contains the following SQL script:
```syntax ```
USE master; USE master;
GO GO
@ -414,8 +372,8 @@ PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring"
3. Run the script that is stored in the .sql file by using a Windows PowerShell command that is similar to the following: 3. Run the script that is stored in the .sql file by using a Windows PowerShell command that is similar to the following:
```syntax ```powershell
PS C:\> Invoke-Sqlcmd -InputFile "Z:\BackupMBAMComplianceStatusDatabaseScript.sql" –ServerInstance $SERVERNAME$\$SQLINSTANCENAME$ Invoke-Sqlcmd -InputFile "Z:\BackupMBAMComplianceStatusDatabaseScript.sql" –ServerInstance $SERVERNAME$\$SQLINSTANCENAME$
``` ```
@ -429,10 +387,9 @@ PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring"
2. To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following: 2. To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following:
```syntax ```powershell
PS C:\> Copy-Item "Z:\MBAM Compliance Status Database Data.bak" Copy-Item "Z:\MBAM Compliance Status Database Data.bak"
\\$SERVERNAME$\$DESTINATIONSHARE$ \\$SERVERNAME$\$DESTINATIONSHARE$
``` ```
3. Using the following table, replace the values in the code example with values that match your environment. 3. Using the following table, replace the values in the code example with values that match your environment.
@ -441,7 +398,7 @@ PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring"
|----------------------|---------------------------------------------------------------| |----------------------|---------------------------------------------------------------|
| $SERVERNAME$ | Name of the server to which the files will be copied. | | $SERVERNAME$ | Name of the server to which the files will be copied. |
| $DESTINATIONSHARE$ | Name of the share and path to which the files will be copied. | | $DESTINATIONSHARE$ | Name of the share and path to which the files will be copied. |
|---|---|
### Restore the Compliance and Audit Database on Server B ### Restore the Compliance and Audit Database on Server B
@ -453,7 +410,7 @@ PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring"
4. To automate this procedure, create a SQL file (.sql) that contains the following SQL script: 4. To automate this procedure, create a SQL file (.sql) that contains the following SQL script:
```syntax ```
-- Create MBAM Compliance Status Database Data logical backup devices. -- Create MBAM Compliance Status Database Data logical backup devices.
Use master Use master
@ -472,8 +429,8 @@ PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring"
5. In Windows PowerShell, run the script that is stored in the file and similar to the following: 5. In Windows PowerShell, run the script that is stored in the file and similar to the following:
```syntax ```powershell
PS C:\> Invoke-Sqlcmd -InputFile "Z:\RestoreMBAMComplianceStatusDatabaseScript.sql" -ServerInstance $SERVERNAME$\$SQLINSTANCENAME$ Invoke-Sqlcmd -InputFile "Z:\RestoreMBAMComplianceStatusDatabaseScript.sql" -ServerInstance $SERVERNAME$\$SQLINSTANCENAME$
``` ```
@ -500,8 +457,8 @@ PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring"
6. To automate this process, you can use the Windows PowerShell command prompt to enter a command line on the Administration and Monitoring Server that is similar to the following: 6. To automate this process, you can use the Windows PowerShell command prompt to enter a command line on the Administration and Monitoring Server that is similar to the following:
```syntax ```powershell
PS C:\> reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MBAM Server\Web" /v reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MBAM Server\Web" /v
ComplianceDBConnectionString /t REG_SZ /d "Integrated Security=SSPI;Initial ComplianceDBConnectionString /t REG_SZ /d "Integrated Security=SSPI;Initial
Catalog=$DATABASE$;Data Source=$SERVERNAME$\$SQLINSTANCENAME$" /f Catalog=$DATABASE$;Data Source=$SERVERNAME$\$SQLINSTANCENAME$" /f
@ -512,52 +469,10 @@ PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring"
7. Using the following table, replace the values in the code example with values that match your environment. 7. Using the following table, replace the values in the code example with values that match your environment.
```html |Parameter | Description |
<table> |---------|------------|
|$SERVERNAME$\$SQLINSTANCENAME$ | Server name and instance of SQL Server where the Recovery Database is located.|
<colgroup> |$DATABASE$|Name of the recovered database.|
<col width="50%" />
<col width="50%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Parameter</th>
<th align="left">Description</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>$SERVERNAME$\$SQLINSTANCENAME$</p></td>
<td align="left"><p>Server name and instance of SQL Server where the Recovery Database is located.</p></td>
</tr>
<tr class="even">
<td align="left"><p>$DATABASE$</p></td>
<td align="left"><p>Name of the recovered database.</p></td>
</tr>
</tbody>
</table>
```
### Install MBAM Server software and run the MBAM Server Configuration wizard on Server B ### Install MBAM Server software and run the MBAM Server Configuration wizard on Server B
@ -575,8 +490,8 @@ On the server that is running the Administration and Monitoring Website, use the
To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following: To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following:
```syntax ```powershell
PS C:\> Start-Website "Microsoft BitLocker Administration and Monitoring" Start-Website "Microsoft BitLocker Administration and Monitoring"
``` ```

175
mdop/mbam-v25/illustrated-features-of-an-mbam-25-deployment.md
View File

@ -7,7 +7,7 @@ ms.pagetype: mdop, security
ms.mktglfcycl: manage ms.mktglfcycl: manage
ms.sitesec: library ms.sitesec: library
ms.prod: w10 ms.prod: w10
ms.date: 06/16/2016 ms.date: 06/15/2018
--- ---
@ -34,178 +34,61 @@ The following image and table explain the features in an MBAM Stand-alone topolo
![mbab2\-5](images/mbam2-5-standalonecomponents.png) ![mbab2\-5](images/mbam2-5-standalonecomponents.png)
Feature type |Feature type|Description|Database|
Feature |-|-|-|
Description |Recovery Database|This database stores recovery data that is collected from MBAM client computers.|This feature is configured on a server running Windows Server and a supported SQL Server instance.|
Database |Compliance and Audit Database|This database stores compliance data, which is used primarily for the Reports that SQL Server Reporting Services hosts.|This feature is configured on a server running Windows Server and a supported SQL Server instance.|
|Compliance and Audit Reports|||
Recovery Database |Reporting Web Service|This web service enables communication between the Administration and Monitoring Website and the SQL Server instance where reporting data is stored.|This feature is installed on a server running Windows Server.|
|Reporting Website (Administration and Monitoring Website)|You view Reports from the Administration and Monitoring Website. The Reports provide recovery audit and compliance status data about the client computers in your enterprise.|This feature is configured on a server running Windows Server.|
This database stores recovery data that is collected from MBAM client computers. |SQL Server Reporting Services (SSRS)|Reports are configured in an SSRS database instance. Reports can be viewed directly from SSRS or from the Administration and Monitoring Website.|This feature is configured on a server running Windows Server and a supported SQL Server instance that is running SSRS.|
|Self-Service Server|||
This feature is configured on a server running Windows Server and a supported SQL Server instance. |Self-Service Web Service|This web service is used by the MBAM Client and the Administration and Monitoring Website and Self-Service Portal to communicate to the Recovery Database.|This feature is installed on a computer running Windows Server.|
|Self-Service Website (Self-Service Portal)|This website enables end users on client computers to independently sign in to a website to get a recovery key if they lose or forget their BitLocker password.|This feature is configured on a computer running Windows Server.|
Compliance and Audit Database |Administration and Monitoring Server|||
|Administration and Monitoring Web Service|The Monitoring Web Service is used by the MBAM Client and the websites to communicate to the databases.|This feature is installed on a computer running Windows Server.|
This database stores compliance data, which is used primarily for the Reports that SQL Server Reporting Services hosts.
This feature is configured on a server running Windows Server and a supported SQL Server instance.
Compliance and Audit Reports
Reporting Web Service
This web service enables communication between the Administration and Monitoring Website and the SQL Server instance where reporting data is stored.
This feature is installed on a server running Windows Server.
Reporting Website (Administration and Monitoring Website)
You view Reports from the Administration and Monitoring Website. The Reports provide recovery audit and compliance status data about the client computers in your enterprise.
This feature is configured on a server running Windows Server.
SQL Server Reporting Services (SSRS)
Reports are configured in an SSRS database instance. Reports can be viewed directly from SSRS or from the Administration and Monitoring Website.
This feature is configured on a server running Windows Server and a supported SQL Server instance that is running SSRS.
Self-Service Server
Self-Service Web Service
This web service is used by the MBAM Client and the Administration and Monitoring Website and Self-Service Portal to communicate to the Recovery Database.
This feature is installed on a computer running Windows Server.
**Important**   **Important**  
The Self-Service Web Service is no longer available in Microsoft BitLocker Administration and Monitoring (MBAM) 2.5 SP1, in which the MBAM Client, the Administration and Monitoring Website, and the Self-Service Portal communicate directly with the Recovery Database. The Self-Service Web Service is no longer available in Microsoft BitLocker Administration and Monitoring (MBAM) 2.5 SP1, in which the MBAM Client, the Administration and Monitoring Website, and the Self-Service Portal communicate directly with the Recovery Database.
 
Self-Service Website (Self-Service Portal)
This website enables end users on client computers to independently sign in to a website to get a recovery key if they lose or forget their BitLocker password.
This feature is configured on a computer running Windows Server.
Administration and Monitoring Server
Administration and Monitoring Web Service
The Monitoring Web Service is used by the MBAM Client and the websites to communicate to the databases.
This feature is installed on a computer running Windows Server.
**Important**   **Important**  
The Monitoring Web Service is no longer available in Microsoft BitLocker Administration and Monitoring (MBAM) 2.5 SP1 since the MBAM Client and the websites communicate directly with the Recovery Database. The Monitoring Web Service is no longer available in Microsoft BitLocker Administration and Monitoring (MBAM) 2.5 SP1 since the MBAM Client and the websites communicate directly with the Recovery Database.
 
Administration and Monitoring Website (also known as the Help Desk
This Website is used by Help Desk users (users with the MBAM Report Users rights) to help end users regain access to their computers when they forget their PIN or password.
This feature is configured on a computer running Windows Server.
   
## <a href="" id="bkmk-cmintegrated"></a>System Center Configuration Manager Integration topology ## <a href="" id="bkmk-cmintegrated"></a>System Center Configuration Manager Integration topology
The following image and table explain the features in the System Center Configuration Manager Integration topology. The following image and table explain the features in the System Center Configuration Manager Integration topology.
![mbam2\-5](images/mbam2-5-cmcomponents.png) ![mbam2\-5](images/mbam2-5-cmcomponents.png)
Feature type
Feature
Description
Self-Service Server
Self-Service Web Service
This web service is used by the MBAM Client and the Self-Service Portal to communicate to the Recovery Database.
This feature is installed on a computer running Windows Server.
**Important**   **Important**  
The Self-Service Web Service is no longer available in Microsoft BitLocker Administration and Monitoring (MBAM) 2.5 SP1, in which the MBAM Client, the Administration and Monitoring Website, and the Self-Service Portal communicate directly with the Recovery Database. The Self-Service Web Service is no longer available in Microsoft BitLocker Administration and Monitoring (MBAM) 2.5 SP1, in which the MBAM Client, the Administration and Monitoring Website, and the Self-Service Portal communicate directly with the Recovery Database.
 
Self-Service Website
This website enables end users on client computers to independently sign in to a website to get a recovery key if they lose or forget their BitLocker password.
This feature is configured on a computer running Windows Server.
Administration and Monitoring Server/Recovery Audit Report
Administration and Monitoring Web Service
This web service enables communication between the Administration and Monitoring Website and the SQL Server databases where reporting data is stored.
This feature is installed on a server running Windows Server.
**Warning**   **Warning**  
The Monitoring Web Service is no longer available in Microsoft BitLocker Administration and Monitoring (MBAM) 2.5 SP1 since the MBAM Client and the websites communicate directly with the Recovery Database. The Monitoring Web Service is no longer available in Microsoft BitLocker Administration and Monitoring (MBAM) 2.5 SP1 since the MBAM Client and the websites communicate directly with the Recovery Database.
  |Feature type|Description|
|-|-|
Administration and Monitoring Website |Self-Service Server|||
|Self-Service Web Service|This web service is used by the MBAM Client and the Self-Service Portal to communicate to the Recovery Database.|This feature is installed on a computer running Windows Server.|
The Recovery Audit report is viewed from the Administration and Monitoring Website. Use the Configuration Manager console to view all other reports, or view reports directly from SQL Server Reporting Services. |Self-Service Website|This website enables end users on client computers to independently sign in to a website to get a recovery key if they lose or forget their BitLocker password.|This feature is configured on a computer running Windows Server.|
|Administration and Monitoring Server/Recovery Audit Report|||
This feature is configured on a server running Windows Server. |Administration and Monitoring Web Service|This web service enables communication between the Administration and Monitoring Website and the SQL Server databases where reporting data is stored.|This feature is installed on a server running Windows Server.|
|Administration and Monitoring Website|The Recovery Audit report is viewed from the Administration and Monitoring Website. Use the Configuration Manager console to view all other reports, or view reports directly from SQL Server Reporting Services.|This feature is configured on a server running Windows Server.|
Databases |Databases|||
|Recovery Database|This database stores recovery data that is collected from MBAM client computers.|This feature is configured on a server running Windows Server and a supported SQL Server instance.|
Recovery Database |Audit Database|This database stores audit information about recovery attempts and activity.|This feature is configured on a server running Windows Server and a supported SQL Server instance.|
|Configuration Manager Features|||
This database stores recovery data that is collected from MBAM client computers. |Configuration Manager Management console|This console is built into Configuration Manager and is used to view reports.|For viewing reports only, this feature can be installed on any server or client computer.|
|Configuration Manager Reports|Reports show compliance and recovery audit data for client computers in your enterprise.|The Reports feature is installed on a server running Windows Server and SSRS, and Reports run on a supported SQL Server instance. A reporting services point must be defined in Configuration Manager on the server that is running SSRS.|
This feature is configured on a server running Windows Server and a supported SQL Server instance. |SQL Server Reporting Services|SSRS enables the MBAM Reports. Reports can be viewed directly from SSRS or from the Configuration Manager console.|SSRS is installed on a server running Windows Server. A reporting services point must be defined in Configuration Manager on the server that is running SSRS.|
Audit Database
This database stores audit information about recovery attempts and activity.
This feature is configured on a server running Windows Server and a supported SQL Server instance.
Configuration Manager Features
Configuration Manager Management console
This console is built into Configuration Manager and is used to view reports.
For viewing reports only, this feature can be installed on any server or client computer.
Configuration Manager Reports
Reports show compliance and recovery audit data for client computers in your enterprise.
The Reports feature is installed on a server running Windows Server and SSRS, and Reports run on a supported SQL Server instance. A reporting services point must be defined in Configuration Manager on the server that is running SSRS.
SQL Server Reporting Services
SSRS enables the MBAM Reports. Reports can be viewed directly from SSRS or from the Configuration Manager console.
SSRS is installed on a server running Windows Server. A reporting services point must be defined in Configuration Manager on the server that is running SSRS.
 
## Related topics ## Related topics
[High-Level Architecture for MBAM 2.5](high-level-architecture-for-mbam-25.md) [High-Level Architecture for MBAM 2.5](high-level-architecture-for-mbam-25.md)
[Getting Started with MBAM 2.5](getting-started-with-mbam-25.md) [Getting Started with MBAM 2.5](getting-started-with-mbam-25.md)
 
 
## Got a suggestion for MBAM? ## Got a suggestion for MBAM?
- Add or vote on suggestions [here](http://mbam.uservoice.com/forums/268571-microsoft-bitlocker-administration-and-monitoring). - Add or vote on suggestions [here](http://mbam.uservoice.com/forums/268571-microsoft-bitlocker-administration-and-monitoring).
- For MBAM issues, use the [MBAM TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopmbam). - For MBAM issues, use the [MBAM TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopmbam).

13
mdop/solutions/how-to-download-and-deploy-mdop-group-policy--admx--templates.md
View File

@ -7,7 +7,7 @@ ms.pagetype: mdop
ms.mktglfcycl: deploy ms.mktglfcycl: deploy
ms.sitesec: library ms.sitesec: library
ms.prod: w8 ms.prod: w8
ms.date: 07/26/2017 ms.date: 06/15/2018
--- ---
@ -18,7 +18,6 @@ You can manage the feature settings of certain Microsoft Desktop Optimization Pa
## MDOP Group Policy templates ## MDOP Group Policy templates
**How to download and deploy the MDOP Group Policy templates** **How to download and deploy the MDOP Group Policy templates**
1. Download the latest [MDOP Group Policy templates](https://www.microsoft.com/en-us/download/details.aspx?id=55531) 1. Download the latest [MDOP Group Policy templates](https://www.microsoft.com/en-us/download/details.aspx?id=55531)
@ -28,15 +27,13 @@ You can manage the feature settings of certain Microsoft Desktop Optimization Pa
**Warning**   **Warning**  
Do not extract the templates directly to the Group Policy deployment directory. Multiple technologies and versions are bundled in this file. Do not extract the templates directly to the Group Policy deployment directory. Multiple technologies and versions are bundled in this file.
 
3. In the extracted folder, locate the technology-version .admx file. Certain MDOP technologies have multiple sets of Group Policy Objects (GPOs). For example, MBAM includes MBAM Management settings and MBAM User settings. 3. In the extracted folder, locate the technology-version .admx file. Certain MDOP technologies have multiple sets of Group Policy Objects (GPOs). For example, MBAM includes MBAM Management settings and MBAM User settings.
4. Locate the appropriate .adml file by language-culture (that is, *en-us* for English-United States). 4. Locate the appropriate .adml file by language-culture (that is, *en-us* for English-United States).
5. Copy the .admx and .adml files to a policy definition folder. Depending on where you store the templates, you can configure Group Policy settings from the local device or from any computer on the domain. 5. Copy the .admx and .adml files to a policy definition folder. Depending on where you store the templates, you can configure Group Policy settings from the local device or from any computer on the domain.
**Local files:** To configure Group Policy settings from the local device, copy template files to the following locations: - **Local files:** To configure Group Policy settings from the local device, copy template files to the following locations:
<table> <table>
<colgroup> <colgroup>
@ -61,9 +58,7 @@ You can manage the feature settings of certain Microsoft Desktop Optimization Pa
</tbody> </tbody>
</table> </table>
  - **Domain central store:** To enable Group Policy settings configuration by a Group Policy administrator from any computer on the domain, copy files to the following locations on the domain controller:
**Domain central store:** To enable Group Policy settings configuration by a Group Policy administrator from any computer on the domain, copy files to the following locations on the domain controller:
<table> <table>
<colgroup> <colgroup>
@ -89,8 +84,6 @@ You can manage the feature settings of certain Microsoft Desktop Optimization Pa
</tbody> </tbody>
</table> </table>
 
6. Edit the Group Policy settings using Group Policy Management Console (GPMC) or Advanced Group Policy Management (AGPM) to configure Group Policy settings for the MDOP technology. 6. Edit the Group Policy settings using Group Policy Management Console (GPMC) or Advanced Group Policy Management (AGPM) to configure Group Policy settings for the MDOP technology.
### MDOP Group Policy by technology ### MDOP Group Policy by technology