Administering MBAM 1.0 by Using PowerShell
Microsoft BitLocker Administration and Monitoring (MBAM) provides the following listed set of Windows PowerShell cmdlets. Administrators can use these PowerShell cmdlets to perform various MBAM server tasks from the command prompt rather than from the MBAM administration website.
How to administer MBAM by using PowerShell
Use the PowerShell cmdlets described here to administer MBAM.
| Name | Description |
|---|---|
Add-MbamHardwareType |
Adds a new hardware model to the MBAM hardware inventory. This cmdlet can also specify whether the hardware is supported or unsupported for BitLocker drive encryption. |
Get-MbamBitLockerRecoveryKey |
Requests an MBAM recovery key that will enable a user to unlock a computer or encrypted drive. |
Get-MbamHardwareType |
Gets a master hardware inventory that contains data that indicates whether hardware models are compatible or incompatible with BitLocker drive encryption. |
Get-MbamTPMOwnerPassword |
Provides a TPM owner password for a user to manage their TPM (Trusted Platform Module) access. Helps users when TPM has locked them out and will no longer accept their PIN. |
Install-Mbam |
Installs MBAM features that provide advanced group policy, encryption, key recovery, and compliance reporting tools. |
Remove-MbamHardwareType |
Removes the hardware models from the hardware inventory. |
Set-MbamHardwareType |
Allows management of a master hardware inventory to designate whether or not hardware models are capable or incapable to perform BitLocker encryption. |
Uninstall-Mbam |
Removes previously installed MBAM features that provide advanced policy, encryption, key recovery, and compliance reporting tools. |
Related topics