I setup MBAM before on a different project without real issue. Like a jackass I didn't document any of it. So here I am trying to set it up again and I'm not sure if it's different or if I've just forgot how to set it up. But it's not working. I setup by: Setup the server with the DBs. Verified it has setup correctly Deployed the agent. Verified it's installed on the clients Deployed my desired GPO settings. Verified the GPO is on the users machines Checked on my MBAM Console site, see the machines in hardware. I checked them as compatible and was expecting the client machines to begin encryption on the next refresh but they haven't. Instead I see in the reports that Encryption Status is set to not encrypted. Do I need to somehow kick off the encryption myself? I assumed I didn't have to and it would encrypt automatically and save the keys into AD. PLEASE MARK ANY ANSWERS TO HELP OTHERS Blog: rorymon.com Twitter: @Rorymon

So as it turns out there was a comedy of errors. One of the admins at my workplace must have removed the GPO. I added a new GPO back and though there'd be no problems but then whoever removed the original added it back and the event view log was reporting a corrupt policy. So straightened out the GPO. Made sure there was only the one set for the users machines. Then after about an hour or so the user received a prompt to encrypt the machine. Probably won't be of any help to anybody else but it did work and automatically prompted to encrypt the machine without me needing to force it. Maybe somebody will find this useful in the future. I also noticed that if a machine had BitLocker already on it before deploying the GPO and client it may report back with an exemption error. You can stop the false reporting by adding a DWORD reg to HKLM\Software\Microsoft\MBAM called DisableMachineVerification and set the value=1 PLEASE MARK ANY ANSWERS TO HELP OTHERS Blog: rorymon.com Twitter: @Rorymon