--- title: Configuring MBAM 2.5 Server Features by Using Windows PowerShell description: Configuring MBAM 2.5 Server Features by Using Windows PowerShell author: dansimp ms.assetid: 826429fd-29bb-44be-b47e-5f5c7d20dd1d ms.reviewer: manager: dansimp ms.author: dansimp ms.pagetype: mdop, security ms.mktglfcycl: manage ms.sitesec: library ms.prod: w10 ms.date: 08/30/2016 --- # Configuring MBAM 2.5 Server Features by Using Windows PowerShell After you install the MBAM 2.5 Server software, you can use configure MBAM 2.5 Server features by using Windows PowerShell cmdlets or the MBAM Server Configuration wizard. This topic describes how to configure MBAM 2.5 by using the Windows PowerShell cmdlets. To use the wizard instead, see [Configuring the MBAM 2.5 Server Features](configuring-the-mbam-25-server-features.md). ## In this topic This topic includes the following information about using Windows PowerShell to configure MBAM: - [How to load Windows PowerShell Help for MBAM 2.5](#bkmk-load-posh-help) - [How to get Help about an MBAM Windows PowerShell cmdlet](#bkmk-help-specific-cmdlet) - [Configurations that you can do only with Windows PowerShell but not with the MBAM Server Configuration wizard](#bkmk-config-only-posh) - [Prerequisites and requirements for using Windows PowerShell to configure MBAM Server features](#bkmk-prereqs-posh-mbamsvr) - [Using Windows PowerShell to configure MBAM on a remote computer](#bkmk-remote-config) - [Required accounts and corresponding Windows PowerShell cmdlet parameters](#bkmk-reqd-posh-accts) For information about the **Get-MbamBitLockerRecoveryKey** and **Get-MbamTPMOwnerPassword** Windows PowerShell cmdlets, which are used to administer MBAM, see [Using Windows PowerShell to Administer MBAM 2.5](using-windows-powershell-to-administer-mbam-25.md). ## How to load Windows PowerShell Help for MBAM 2.5 For a list of the Windows PowerShell cmdlets on TechNet, see [Microsoft Desktop Optimization Pack Automation with Windows PowerShell](https://go.microsoft.com/fwlink/?LinkId=392816). **To load the MBAM 2.5 Help for Windows PowerShell cmdlets after installing the MBAM Server software** 1. Open Windows PowerShell or Windows PowerShell Integrated Scripting Environment (ISE). 2. Type **Update-Help –Module Microsoft.MBAM**. ## How to get Help about an MBAM Windows PowerShell cmdlet Windows PowerShell Help for MBAM is available in the following formats:
Windows PowerShell Help format | More information |
---|---|
At a Windows PowerShell command prompt, type Get-Help <cmdlet> |
To upload the latest Windows PowerShell cmdlets, follow the instructions in the previous section on how to load Windows PowerShell Help for MBAM. |
On TechNet as webpages |
|
On the Download Center as a Word .docx file |
|
On the Download Center as a .pdf file |
Configurations that you can do only by using Windows PowerShell | Details |
---|---|
Install the web services on a separate computer from the web applications. |
Using the wizard, you must install the web services and web applications on the same computer. |
Enable reports on a separate reporting services point without installing all of the Configuration Manager objects. |
|
Delete all of the objects from Configuration Manager. |
Deleting the objects in turn deletes all of the compliance data from Configuration Manager. |
Enter a custom connection string for the databases. |
Example: To configure the web applications to work with mirroring, you must use the Enable-MbamWebApplication cmdlet to specify the appropriate failover partner syntax in the connection string. |
Skip validation and configure a feature even though the prerequisite check failed. |
Prerequisite | Details or additional information |
---|---|
Create the required accounts. |
See section Required accounts and corresponding Windows PowerShell cmdlet parameters later in this topic. |
User accounts and groups that you pass as parameters to the Windows PowerShell cmdlets must be valid accounts in the domain. |
You cannot use local accounts. |
Specify accounts in the down-level format. |
Examples: domainNetBiosName\userdomainNetBiosName\group |
Prerequisite | Details or additional information | ||||||||
---|---|---|---|---|---|---|---|---|---|
You must be an administrator on the local computer where you are configuring the MBAM feature. |
|||||||||
Use an elevated Windows PowerShell command prompt to run all Windows PowerShell cmdlets. |
|||||||||
For the Enable-MbamDatabase cmdlet only: You must have "create any database" permissions on the instance of the target Microsoft SQL Server database. This user account must be a part of the local administrators group or the Backup Operators group to register the MBAM Volume Shadow Copy Service (VSS) Writer. |
By default, the database administrator or system administrator has the required "create any database" permissions. For more information about VSS Writer, see Volume Shadow Copy Service. |
||||||||
For the System Center Configuration Manager Integration feature only: The user who enables this feature must have these rights in Configuration Manager: |
|
When to use this capability |
When you want to configure the MBAM 2.5 Server features on a remote computer. The Windows PowerShell cmdlets are running on one computer, and you are configuring the features on a different, remote computer. |
What you have to do |
To use Windows PowerShell to configure MBAM 2.5 Server features on a remote computer, you must:
|
Why you have to do it |
This protocol enables the Windows PowerShell cmdlets to connect to Active Directory Domain Services by using the user’s administrative credentials. You might get a validation error if you start the Windows PowerShell session without this protocol. |
How to start a Windows PowerShell session with the CredSSP protocol |
Type the following code at the Windows PowerShell prompt:
The following code shows an example.
|