Deploy the MBAM client to desktop and laptop computers
This article explains how to deploy the MBAM client to users' computers. You can deploy the MBAM client through an electronic software distribution system, such as Active Directory Domain Services or Microsoft System Center Configuration Manager.
To deploy the MBAM client as part of a Windows deployment, see How to enable BitLocker by using MBAM as part of a Windows deployment.
Before you start the MBAM client deployment, review the MBAM 2.5 supported configurations.
To deploy the MBAM client to desktop or laptop computers
Locate the MBAM client installation files that are provided with the MBAM software.
To deploy the Windows Installer package to target computers, use Active Directory Domain Services or an enterprise software deployment tool like Microsoft System Center Configuration Manager.
Configure the distribution settings or Group Policy settings to run the MBAM client installation file.
After successful installation, the MBAM client applies the Group Policy settings that are received from a domain controller to begin BitLocker Drive Encryption and management functions.
Important
If a remote desktop protocol connection is active, the MBAM client doesn't start BitLocker Drive Encryption actions. Before BitLocker Drive Encryption begins, all remote console connections must be closed and a user must be signed in to a physical console session.