Find here Under the Sixth Video in my "Mass Effect Lab" in English Audio and It Discuss the Follows:



Setup up MBAM several Active Directory service accounts and security groups prior to installation



Add The MBAM-RO-SVC and MBAM-IISAP-SVC Active Directory service accounts To the IIS_USR Local Group on EDIMF02 (MBAM Server)



The MBAM-RO-SVC Active Directory service account needs Logon as a batch job permissions on the SQL Server machine (EDIMF02) and The MBAM-IISAP-SVC Active Directory service account needs Logon as a batch job and Impersonate a client after authentication permissions on the server running the web service components (EDIMF02)



In order to avoid Kerberos issues, the application pool account (MBAM-IISAP-SVC) Is configured with a service principal name (SPN)



Add IIS Web Server Role and NetFrame 3.5 Feature Then Run Powershell Commands To Add Additional Features to the Web server



Install ASP.NET MVC prior to proceeding with the installation of the MBAM components



SQL 2016 Database is Installed , SQL must be installed using the SQL_Latin1_General_CP1_CI_AS collation and SQL reporting services is also required for the reporting element of the installation



https://www.youtube.com/watch?v=ZUKhHoJBTz8

Find here Under the Sixth Video in my "Mass Effect Lab" in Arabic Audio and It Discuss the Follows:



Setup up MBAM (Microsoft BitLocker Administration and Monitoring ) several Active Directory service accounts and security groups prior to installation



Add The MBAM-RO-SVC and MBAM-IISAP-SVC Active Directory service accounts To the IIS_USR Local Group on EDIMF02 (MBAM Server)



The MBAM-RO-SVC Active Directory service account needs Logon as a batch job permissions on the SQL Server machine (EDIMF02) and The MBAM-IISAP-SVC Active Directory service account needs Logon as a batch job and Impersonate a client after authentication permissions on the server running the web service components (EDIMF02)



In order to avoid Kerberos issues, the application pool account (MBAM-IISAP-SVC) Is configured with a service principal name (SPN)



Add IIS Web Server Role and NetFrame 3.5 Feature Then Run Powershell Commands To Add Additional Features to the Web server



Install ASP Dot NET MVC prior to proceeding with the installation of the MBAM components



SQL 2016 Database is Installed , SQL must be installed using the SQL_Latin1_General_CP1_CI_AS collation and SQL Reporting services is also required for the reporting element of the installation



https://www.youtube.com/watch?v=jfO5JgdvtUg

please rate the channel if you like it

Find here Under the Seventh Video in my "Mass Effect Lab" in English Audio and It Discuss the Follows:



Install SQL Management Studio To Access SQL Database



Having downloaded the MDOP media and launch the MbamServerSetup file on your database server.



Install the latest servicing release For MbamServerSetup



Launch the MBAM Server Configuration on the SQL database server and Choose To Configure Compliance and Audit Database and Recovery Database.



Enter the SQL server name and security group Assigned to Read and Write to The Databases (MBAM-Database Read and MBAM-Database Read Write Active Directory Groups).



MBAM reports as previously mentioned use SQL Server Reporting Services Launch the MBAM Server Configuration again on the SQL database server and Select Reports from the “Select features to add” screen.



Enter the required SQL server address and User credentials That Will Be Used To Access Compliance and Audit Database To Run Reports (MBAM-RO-SVC) (Should access MBAM Compliance and Audit Database and Give the User read Role on the Database Before Doing This ) and Active Directory Group that will be allowed to run Reports (MBAM Report Users).



Export the PowerShell script for backup purposes.



https://www.youtube.com/watch?v=vlRYXMbKEe4

Find here Under the Seventh Video in my "Mass Effect Lab" in Arabic Audio and It Discuss the Follows:



Install SQL Management Studio To Access SQL Database



Having downloaded the MDOP media and launch the MbamServerSetup file on your database server.



Install the latest servicing release For MbamServerSetup



Launch the MBAM Server Configuration on the SQL database server and Choose To Configure Compliance and Audit Database and Recovery Database.



Enter the SQL server name and security group Assigned to Read and Write to The Databases (MBAM-Database Read and MBAM-Database Read Write Active Directory Groups).



MBAM reports as previously mentioned use SQL Server Reporting Services Launch the MBAM Server Configuration again on the SQL database server and Select Reports from the “Select features to add” screen.



Enter the required SQL server address and User credentials That Will Be Used To Access Compliance and Audit Database To Run Reports (MBAM-RO-SVC) (Should access MBAM Compliance and Audit Database and Give the User read Role on the Database Before Doing This ) and Active Directory Group that will be allowed to run Reports (MBAM Report Users).



Export the PowerShell script for backup purposes.



https://www.youtube.com/watch?v=Ysu087SQa9M

Find here Under the Eight Video in my "Mass Effect Lab" in English Audio and It Discuss the Follows:

Open the SQL Management Studio To Access MBAM Compliance and Audit Database and MBAM Recovery Database and GIve MBAM-RO-SVC Active Directory Account Read Role on both Databases and MBAM-IISAP-SVC Active Directory Account Read and Write Access To Both Databases as Well.

Open MBAM-IISAP-SVC Active Directory Account Properties and then Delegation Tab and Then Choose Option "Trust the User For Delegation For Specified Services and Then click add and Then Add MBAM-IISAP-SVC Active Directory User Account and add MBAM Server As Active Directory Computer Object and Choose http protocol.

Add My Active Directory User Name To Both MBAM Report Users Active Directory Group and MBAM Advanced Helpdesk Users Group To Be Able To Access MBAM Reports and Access Helpdesk Portal.

Launch the MBAM Server Configuration on the Web Server Database (EDIMF02 or MBAM Server Which is Also Acting As SQL Database and Application Server Hosting MBAM Software) and Select all of the Web Application options from the “Select features to add” screen.

Enter the required IIS details and Web Application service account details (Which is MBAM-IISAP-SVC and I am setting up the IIS applications without SSL, however if you are using SSL you will need to select the security certificate to be used).

Enter the SQL server details for access to both of the MBAM databases (MBAM Compliance and Audit Database and MBAM Recovery Database).

Enter the Reporting group name (MBAM Report Users Active Directory Group Authorized To Run SQL Reports) along with the Reporting Services URL (URL To Access SQL Reports)

Export the PowerShell file

Once installed you will receive confirmation.

Test Accessing to Both Helpdesk Portal and SelfService Portal Succeeded.

https://www.youtube.com/watch?v=VJZwvbV1IJE

Find here Under the Eight Video in my "Mass Effect Lab" in Arabic Audio and It Discuss the Follows:

Open the SQL Management Studio To Access MBAM Compliance and Audit Database and MBAM Recovery Database and GIve MBAM-RO-SVC Active Directory Account Read Role on both Databases and MBAM-IISAP-SVC Active Directory Account Read and Write Access To Both Databases as Well.

Open MBAM-IISAP-SVC Active Directory Account Properties and then Delegation Tab and Then Choose Option "Trust the User For Delegation For Specified Services and Then click add and Then Add MBAM-IISAP-SVC Active Directory User Account and add MBAM Server As Active Directory Computer Object and Choose http protocol.

Add My Active Directory User Name To Both MBAM Report Users Active Directory Group and MBAM Advanced Helpdesk Users Group To Be Able To Access MBAM Reports and Access Helpdesk Portal.

Launch the MBAM Server Configuration on the Web Server Database (EDIMF02 or MBAM Server Which is Also Acting As SQL Database and Application Server Hosting MBAM Software) and Select all of the Web Application options from the “Select features to add” screen.

Enter the required IIS details and Web Application service account details (Which is MBAM-IISAP-SVC and I am setting up the IIS applications without SSL, however if you are using SSL you will need to select the security certificate to be used).

Enter the SQL server details for access to both of the MBAM databases (MBAM Compliance and Audit Database and MBAM Recovery Database).

Enter the Reporting group name (MBAM Report Users Active Directory Group Authorized To Run SQL Reports) along with the Reporting Services URL (URL To Access SQL Reports)

Export the PowerShell file

Once installed you will receive confirmation.

Test Accessing to Both Helpdesk Portal and SelfService Portal Succeeded.

https://www.youtube.com/watch?v=rPcNrDwNupE

Find here Under the Ninth Video in my "Mass Effect Lab" in English Audio and It Discuss the Follows:



All settings for MBAM client deployments are configured through Group Policy. The first thing you will need to do is to update your policy central store with the MBAM ADMX group policy files which can be downloaded from Microsoft.



Configuring the Bitlocker GPO To Use AES XTS 256 bit encryption and Encrypt All fixed disks are encrypted and removable drives and Operating Systems Hardisk and Other Setting are Applied



Deploy The MBAM Client Using Login script and Configure Setting For MBAM Client Using MBAM GPO.



Create A Virtual Machine and Install Windows 10 Enterprise LTSC 2019 on It and Join it to the Domain to Test Bitlocker Process and MBAM Deployment.



https://www.youtube.com/watch?v=q-iQvx7196c

Find here Under the Ninth Video in my "Mass Effect Lab" in Arabic Audio and It Discuss the Follows:



All settings for MBAM client deployments are configured through Group Policy. The first thing you will need to do is to update your policy central store with the MBAM ADMX group policy files which can be downloaded from Microsoft.



Configuring the Bitlocker GPO To Use AES XTS 256 bit encryption and Encrypt All fixed disks are encrypted and removable drives and Operating Systems Hardisk and Other Setting are Applied



Deploy The MBAM Client Using Login script and Configure Setting For MBAM Client Using MBAM GPO.



Create A Virtual Machine and Install Windows 10 Enterprise LTSC 2019 on It and Join it to the Domain to Test Bitlocker Process and MBAM Deployment.



https://www.youtube.com/watch?v=xDi6_z3vx6g

Find here Under the Tenth Video (and the last in the playlist) in my "Mass Effect Lab" in English Audio and It Discuss the Follows:



Join a PC to the Domain (Mass Effect Domain)



Apply Bitlocker Encryption Process Using MBAM (Microsoft Bitlocker Administration and Monitoring ) Client After Being Deployed by Login Script



Display and View the Bitlocker Encryption keys that are saved to the Active Directory (Encryption Password Viewer Tool Should be installed First on Domain Controller)



Run MBAM Reports From the MBAM Help-desk portal With the Name of the PC Bitlocker Process ran on and What partitions Are encrypted and by What Encryption Type and MBAM Reports URL



Recover Bitlocker Key Using MBAM Self-Service Portal.



https://www.youtube.com/watch?v=jjMy9c6qBLM

This is an Infograph for my "Mass Effect Lab"

Find here Under the Tenth Video (and the last in the playlist) in my "Mass Effect Lab" in Arabic Audio and It Discuss the Follows:



Join a PC to the Domain (Mass Effect Domain)



Apply Bitlocker Encryption Process Using MBAM (Microsoft Bitlocker Administration and Monitoring ) Client After Being Deployed by Login Script



Display and View the Bitlocker Encryption keys that are saved to the Active Directory (Encryption Password Viewer Tool Should be installed First on Domain Controller)



Run MBAM Reports From the MBAM Help-desk portal With the Name of the PC Bitlocker Process ran on and What partitions Are encrypted and by What Encryption Type and MBAM Reports URL



Recover Bitlocker Key Using MBAM Self-Service Portal.



https://www.youtube.com/watch?v=Ao6nXe-IhKw

This is my New Lab "The Tron Legacy Lab" presentation , it will talk about full migration of active directory and dhcp and home user directories and department shares and windows user profiles using ADMT (Active Directory Migration Tool)

This is my New Lab "The Tron Legacy Lab" presentation , it will talk about full migration of active directory and dhcp and home user directories and department shares and windows user profiles using ADMT (Active Directory Migration Tool)