It’s not that long ago since Microsoft released 1908.2 but now at the end of September they’ve released another great Technical Preview, this time version 1909. To see what’s new and what features it introduces click here.

Earlier this year I blogged about the new BitLocker Management abilities coming to ConfigMgr and this release adds even more features and abilities in that area such as long awaited SelfService and Helpdesk functions. If you want to see those new abilities right away then scroll down to What’s new with MBAM.

To get TP1909, open your Configuration Manager console and click on the Check for updates button in the ribbon.

And after downloading the update it’ll be listed in a state called Ready to Install.

Right click on the update pack and choose Install Update Pack. If all goes well it will begin installing and you can monitor that installation via log files such as CMUpdate.log.

Or directly in the console by clicking on the Update Pack, and choosing Show Status.

And after some time the update is installed successfully and you’ll be prompted to upgrade the ConfigMgr console itself.

and after upgrading the console you get to see the new release.

What’s new with MBAM ?

This release is packed with new features, so let’s look at a few of them.

There are a bunch or new reports for MBAM located in the Reporting node.

However when I tried to run any of them I got an error, I’ve alerted the Microsoft Product Group about this.

Update: Aaron informed us that this has been fixed and added to the known issues

https://docs.microsoft.com/en-us/sccm/core/get-started/2019/technical-preview-1909#general-known-issues

To use the MBAM self service, you’ll need to do some manual actions on the Primary site server.

1. Copy the following files from SMSSETUP\BIN\X64 to a local folder:
   • MBAMWebSite.cab
   • MBAMWebSiteInstaller.ps1
2. Run PowerShell as an administrator, and then run the script similar to the following command line:

.\MBAMWebSiteInstaller.ps1 -SqlServerName <ServerName> 
-SqlInstanceName <InstanceName> -SqlDatabaseName 
<DatabaseName> -ReportWebServiceUrl <ReportWebServiceUrl> 
-HelpdeskUsersGroupName <DomainUserGroup> -HelpdeskAdminsGroupName
 <DomainUserGroup> -MbamReportUsersGroupName 
<DomainUserGroup> -SiteInstall Both

So let’s try it ! I browsed to the location of the EasySetupPayload on my primary and that was D:\Program Files\Microsoft Configuration Manager\EasySetupPayload\dc84dd4c-0f5a-4fb1-8e52-c0a64acaec75\SMSSETUP\BIN\X64

The GUID in red will change depending on what version of Update you are working with.

And it’s done !

Here are the script parameters that worked for me.

PS C:\Temp\MBAM> .\MBAMWebSiteInstaller.ps1 -SqlServerName CM01.windowsnoob.lab.local -SqlDatabaseName CM_P01 -ReportWebServiceUrl http://CM01.windowsnoob.lab.local/Reportserver -HelpdeskUsersGroupName windowsnoob\mbam_hd -HelpdeskAdminsGroupName windowsnoob\MBAM_HD_ADV -MbamReportUsersGroupName windowsnoob\MBAM_HD_Report -SiteInstall Both

And after running the script…the self service notice page is shown when visiting https://cm01.windowsnoob.lab.local/SelfService

to change the notice text, edit the Notice.TXT file located below

And edit the file using an administrative command prompt, once done you can see the updated notice.

And to change from Contoso IT to your company name, do as follows:

And here’s the self service itself.

To use the HelpDesk, make sure that the user you specify when prompted for credentials is in the MBAM_HD_Adv group (or whichever group you specified when installing).

Related (MBAM) reading

• On-premises BitLocker management using System Center Configuration Manager
• How can I get BitLocker Recovery Keys from the ConfigMgr database
• How to fix: “Unable to find suitable Recovery Service MP. Marking policy non-compliant”
• How does Key Rotation work in MBAM integrated with SCCM ?
• How can you use the Self Service feature when MBAM is integrated within SCCM?
• How can you use the Help Desk feature when MBAM is integrated within SCCM?
• https://techcommunity.microsoft.com/t5/Enterprise-Mobility-Security/Microsoft-expands-BitLocker-management-capabilities-for-the/ba-p/544329

What about OSD ?

You can now customize Language Settings in an OSD task sequence in the Apply Windows Settings step ! however this is currently limited to newly created task sequences, if you try to edit an existing task sequence with this feature then it will crash (should be fixed in 1910).