{"id":6327,"date":"2021-07-27T14:22:34","date_gmt":"2021-07-27T18:52:34","guid":{"rendered":"https:\/\/www.apps4rent.com\/blog\/?p=6327"},"modified":"2023-01-18T10:21:53","modified_gmt":"2023-01-18T14:51:53","slug":"mbam-to-microsoft-endpoint-manager-migration","status":"publish","type":"post","link":"https:\/\/www.apps4rent.com\/blog\/mbam-to-microsoft-endpoint-manager-migration\/","title":{"rendered":"How to Migrate MBAM to Microsoft Endpoint Manager?"},"content":{"rendered":"<p>Windows machines use BitLocker for encrypting data stored in operating system volumes and drives. Many enterprises use Microsoft BitLocker Administration and Monitoring (MBAM) to simplify the management and monitoring of the enterprise Windows devices. However, after the mainstream support for MBAM ended in 2019, enterprises are exploring other options to simplify the administration of Windows devices.<\/p>\n<p>Microsoft provides two other BitLocker management alternatives through System Center Configuration Manager (SCCM) and Microsoft Endpoint Manager (MEM). While SCCM is an on-premises option, MEM is a cloud-native solution that includes several tools and services for managing and monitoring mobile devices, desktop computers, virtual machines, embedded devices, and servers.<\/p>\n<h2 style=\"font-size: 24px;\">What Are the Advantages of Migrating MBAM Servers to MEM?<\/h2>\n<p>Microsoft Endpoint Manager uses Intune to configure BitLocker Drive Encryption. Here are the advantages of migrating MBAM servers to Microsoft Endpoint Manager.<\/p>\n<ul>\n<li style=\"margin-bottom: 10px;\">Admins can take advantage of advanced readiness and compliance reporting capabilities to understand the encryption status of the device estate of their enterprises. Onscreen error codes can help in troubleshooting when devices fail BitLocker enablement.<\/li>\n<li style=\"margin-bottom: 10px;\">It offers more flexibility and granularity than other options, allowing admins to implement the appropriate level of security to managed devices.<\/li>\n<li style=\"margin-bottom: 10px;\">It allows admins to recover encryption keys from the Microsoft Intune console. The user self-service key recovery can be enabled across platforms, including web, iOS, Android, Windows, and macOS.<\/li>\n<li style=\"margin-bottom: 10px;\">It supports the use of single-use recovery keys on Windows devices that can be rolled on or generated on-demand.<\/li>\n<li style=\"margin-bottom: 10px;\">Microsoft has simplified the migration from MBAM to cloud management by integrating it directly into the key rotation feature.<\/li>\n<\/ul>\n<h2 style=\"font-size: 24px;\">How Are MBAM Servers Migrated to Microsoft Endpoint Manager?<\/h2>\n<p>One of the most important considerations for migrating data from MBAM servers to Microsoft Endpoint Manager is to ensure that key IDs listed by MBAM Server match with the ones listed by <span style=\"color: #007fac;\"><a style=\"color: #007fac;\" href=\"https:\/\/www.apps4rent.com\/azure-active-directory-pricing.html\">Azure AD<\/a><\/span>. Here is the 5-step process to migrate MBAM SQL Server to MEM.<\/p>\n<ul>\n<li style=\"margin-bottom: 10px;\">Extract the BitLocker recovery keys using SQL Management Studio and export the data to an Excel sheet.<\/li>\n<li style=\"margin-bottom: 10px;\">Configure Microsoft BitLocker policies using Microsoft Endpoint Manager to escrow BitLocker recovery passwords to Azure AD Device Accounts.<\/li>\n<li style=\"margin-bottom: 10px;\">Use Graph API to generate the list of BitLocker Recovery Keys stored in Azure AD.<\/li>\n<li style=\"margin-bottom: 10px;\">Use the data in the Excel sheet with the recovery key details to cross-check that the Password Key IDs from MBAM Database match with the Key IDs from Azure AD. Back up the missing BitLocker Recovery Keys to Azure AD and assign them to the machines that do not have the keys.<\/li>\n<li style=\"margin-bottom: 10px;\">Resolve any remaining issues with devices that are missing recovery passwords in Azure AD or MEM, create backups for the MBAM Database, and decommission the on-premises MBAM servers.<\/li>\n<\/ul>\n<h3 style=\"font-size: 23px;\">Apps4Rent Can Help with MBAM Migration<\/h3>\n<p>Migrating MBAM servers to Microsoft Endpoint Manager simplifies the administration of Windows devices. However, the process itself can be complex as it involves the use of scripts at various stages. As a Microsoft Gold Partner in several competencies, including cloud platform and cloud collaboration, Apps4Rent can help with Office 365\/ Microsoft 365 and Azure licensing, migration, and customization. Contact our Microsoft certified professionals available 24\/7 via phone, chat, and email for <a href=\"https:\/\/www.apps4rent.com\/managed-azure.html\"><span style=\"color: #007fac;\">managed Azure services<\/span><\/a>.<\/p>\n<style>{#ddexitpopwrapper.open .ddexitpop {display: block;}#ddexitpopwrapper.open .ddexitpop{max-width:1000px;width:1000px;}}@media only screen and (min-width:99px) and (max-width:767px){#ddexitpopwrapper.open .ddexitpop {display: none;}}<\/style>\r\n<link rel=\"stylesheet\" type=\"text\/css\" href=\"https:\/\/www.apps4rent.com\/blog\/wp-content\/themes\/apps4rentoffice\/popup\/exitpopup\/ddexitpop.css\"\/><script src=\"https:\/\/www.apps4rent.com\/blog\/wp-content\/themes\/apps4rentoffice\/popup\/exitpopup\/ddexitpop.js\"><\/script>\r\n<div id=\"ddexitpop1\" class=\"ddexitpop\" style=\"z-index:1000;box-shadow: #00000085 -20px -5px 1200px 1000px;max-width:1000px;width:1000px;left:50%;top: 5px;margin-left: -500px;\">\r\n<div style=\"background: #fff;color: white;height:615px;\">\r\n<div class=\"col-md-6 popup1\" style=\"color:white;height:auto;padding-left: 0px;padding-right: 0px;background:none;\"><img decoding=\"async\" src=\"https:\/\/www.apps4rent.com\/blog\/wp-content\/uploads\/2020\/11\/apps4rent-manage-azure-services.png\" alt=\"Manage Azure\" style=\"height: inherit;\"\/><\/div>\r\n<div class=\"col-md-6\" style=\"background: white;\">\r\n<div style=\"margin-right: -15px;\"><span style=\"cursor: pointer;position: relative; top: 0px;left: 0px;float: right;font-family: Arial;font-size: 17px;background-color: #d1d1d1;color: #4c4c4c; padding-left: 10px;padding-right: 10px;text-decoration: none;right: -40px;\" onclick=\"myFunction()\">X<\/span><\/div>\r\n<p style=\"padding-top: 7px;color: #30508c;margin-bottom: 10px;margin-top: 30px;text-align: center;line-height: 35px;font-size:30px;font-weight: 500; font-family:roboto !important;\">Looking for help with Azure?<br \/>\r\nOur Azure experts can help you.<\/p>\r\n<p>\n<div class=\"wpcf7 no-js\" id=\"wpcf7-f7298-o1\" lang=\"en-US\" dir=\"ltr\" data-wpcf7-id=\"7298\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/blog\/wp-json\/wp\/v2\/posts\/6327#wpcf7-f7298-o1\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"Contact form\" novalidate=\"novalidate\" data-status=\"init\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"7298\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.1.5\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"en_US\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f7298-o1\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/><input type=\"hidden\" name=\"_wpcf7cf_hidden_group_fields\" value=\"[]\" \/><input type=\"hidden\" name=\"_wpcf7cf_hidden_groups\" value=\"[]\" \/><input type=\"hidden\" name=\"_wpcf7cf_visible_groups\" value=\"[]\" \/><input type=\"hidden\" name=\"_wpcf7cf_repeaters\" value=\"[]\" \/><input type=\"hidden\" name=\"_wpcf7cf_steps\" value=\"{}\" \/><input type=\"hidden\" name=\"_wpcf7cf_options\" value=\"{&quot;form_id&quot;:7298,&quot;conditions&quot;:[{&quot;then_field&quot;:&quot;apoint&quot;,&quot;and_rules&quot;:[{&quot;if_field&quot;:&quot;meeting&quot;,&quot;operator&quot;:&quot;equals&quot;,&quot;if_value&quot;:&quot;Yes&quot;}]}],&quot;settings&quot;:{&quot;animation&quot;:&quot;yes&quot;,&quot;animation_intime&quot;:200,&quot;animation_outtime&quot;:200,&quot;conditions_ui&quot;:&quot;normal&quot;,&quot;notice_dismissed&quot;:false,&quot;notice_dismissed_rollback-cf7-5.9.5&quot;:true}}\" \/>\n<\/fieldset>\n<style>.wpcf7 form .wpcf7-response-output{margin: 0.5em 0.5em 0.5em;}.first{width:60px;color: #2A363F;text-align: left;}.wpcf7-list-item-label{color: #2A363F;text-align: left;font-size: 20px 'Roboto';font-weight:400;font-style: normal;}.inputf{font: 16px 'Roboto !important';font-weight: normal;font-style: normal;line-height: 25px;color: #2A363F;padding: 5px 10px;font-size: 16px;border: #9d9fa0 1px solid !important;margin-bottom:20px !important;box-sizing: border-box;border-radius: 3px !important;width: 100%;}\n.cf7-style div.wpcf7-response-output{width:fit-content;margin: 0px;padding: 5px !important;}.button4 {padding: 15px 20px;font-size: 18px !important;background: #375181;font-family: sans-serif;color: #fff;border: #9dbfff 2px solid;box-shadow: none;font-weight: bold;margin-bottom:0px !important;width: 100% !important;}.wpcf7 form.invalid .wpcf7-response-output, .wpcf7 form.unaccepted .wpcf7-response-output, .wpcf7 form.payment-required .wpcf7-response-output{width: max-content;margin: 0px;}\n<\/style>\n<style>@media only screen and (min-width:99px) and (max-width:767px){#content{margin-left:0px auto;}.sec {width:100% !important;float: none !important;}.html input[type=\"button\"], input[type=\"reset\"], input[type=\"submit\"]{font-size:16px !important;}}\n<\/style>\n<div style=\"padding-left: 15px;padding-right: 15px;padding-top: 15px;padding-bottom: 0px;\">\n\t<div style=\"float: left;width: 100%;margin-right: 15px;\" class=\"sec\">\n\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"Name\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required inputf\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Name*\" value=\"\" type=\"text\" name=\"Name\" \/><\/span>\n\t\t<\/p>\n\t<\/div>\n\t<div style=\"float: left;width: 100%;margin-right: 15px;\" class=\"sec\">\n\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"contact\"><input size=\"40\" maxlength=\"10\" minlength=\"6\" class=\"wpcf7-form-control wpcf7-tel wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-tel inputf\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Contact Number*\" value=\"\" type=\"tel\" name=\"contact\" \/><\/span>\n\t\t<\/p>\n\t<\/div>\n\t<div style=\"float: left;width: 100%;\" class=\"sec\">\n\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"email\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email inputf\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Email ID*\" value=\"\" type=\"email\" name=\"email\" \/><\/span>\n\t\t<\/p>\n\t\t<p style=\"font-size: 20px 'Roboto';font-weight:400;font-style: normal;color: #2A363F;text-align: left;margin-bottom: 10px;\">Schedule a meeting?<br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"meeting\"><span class=\"wpcf7-form-control wpcf7-checkbox wpcf7-validates-as-required wpcf7-exclusive-checkbox meeting\"><span class=\"wpcf7-list-item first\"><label><input type=\"checkbox\" name=\"meeting\" value=\"Yes\" \/><span class=\"wpcf7-list-item-label\">Yes<\/span><\/label><\/span><span class=\"wpcf7-list-item last\"><label><input type=\"checkbox\" name=\"meeting\" value=\"No\" \/><span class=\"wpcf7-list-item-label\">No<\/span><\/label><\/span><\/span><\/span>\n\t\t<\/p>\n\t\t<div data-id=\"apoint\" data-orig_data_id=\"apoint\"  class=\"\" data-class=\"wpcf7cf_group\">\n\t\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"time\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text inputf\" aria-invalid=\"false\" placeholder=\"Preferred Callback Time* (E.g. Monday, 4 PM EST, NJ, USA)\" value=\"\" type=\"text\" name=\"time\" \/><\/span>\n\t\t\t<\/p>\n\t\t<\/div>\n\t<\/div>\n\t<div style=\"float: left;width: 100%;\" class=\"sec\">\n\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"msg\"><textarea cols=\"40\" rows=\"5\" maxlength=\"2000\" class=\"wpcf7-form-control wpcf7-textarea inputf\" aria-invalid=\"false\" placeholder=\"Message\" name=\"msg\"><\/textarea><\/span>\n\t\t<\/p>\n\t<\/div>\n\t<div>\n\t\t<p><input class=\"wpcf7-form-control wpcf7-submit has-spinner button4\" type=\"submit\" value=\"SUBMIT REQUEST\" \/>\n\t\t<\/p>\n\t<\/div>\n<\/div><p style=\"display: none !important;\" class=\"akismet-fields-container\" data-prefix=\"_wpcf7_ak_\"><label>&#916;<textarea name=\"_wpcf7_ak_hp_textarea\" cols=\"45\" rows=\"8\" maxlength=\"100\"><\/textarea><\/label><input type=\"hidden\" id=\"ak_js_1\" name=\"_wpcf7_ak_js\" value=\"79\"\/><script>document.getElementById( \"ak_js_1\" ).setAttribute( \"value\", ( new Date() ).getTime() );<\/script><\/p><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n<\/p>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n<p><script>jQuery(function(){ddexitpop.init({contentsource: ['id', 'ddexitpop1'],fxclass: 'random',hideaftershow: true,displayfreq: 'always',onddexitpop: function($popup){console.log('Exit Pop Animation Class Name: ' + ddexitpop.settings.fxclass)}})})<\/script><script>function myFunction(){document.getElementById(\"ddexitpop1\").style.display = \"none\";}<\/script><\/p>\r\n\n","protected":false},"excerpt":{"rendered":"<p>Windows machines use BitLocker for encrypting data stored in operating system volumes and drives. Many enterprises use Microsoft BitLocker Administration and Monitoring (MBAM) to simplify the management and monitoring of the enterprise Windows devices. However, after the mainstream support for MBAM ended in 2019, enterprises are exploring other options to simplify the administration of Windows [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[545,654],"tags":[],"class_list":["post-6327","post","type-post","status-publish","format-standard","hentry","category-azure","category-microsoft"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.apps4rent.com\/blog\/wp-json\/wp\/v2\/posts\/6327","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.apps4rent.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.apps4rent.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.apps4rent.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.apps4rent.com\/blog\/wp-json\/wp\/v2\/comments?post=6327"}],"version-history":[{"count":4,"href":"https:\/\/www.apps4rent.com\/blog\/wp-json\/wp\/v2\/posts\/6327\/revisions"}],"predecessor-version":[{"id":7318,"href":"https:\/\/www.apps4rent.com\/blog\/wp-json\/wp\/v2\/posts\/6327\/revisions\/7318"}],"wp:attachment":[{"href":"https:\/\/www.apps4rent.com\/blog\/wp-json\/wp\/v2\/media?parent=6327"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.apps4rent.com\/blog\/wp-json\/wp\/v2\/categories?post=6327"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.apps4rent.com\/blog\/wp-json\/wp\/v2\/tags?post=6327"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}