MBAM and OS Deployment

[Davidge]

Hey Guys,

 

I've lurked around this site a bit and it's a great resource so thanks!

 

I have my own question now though around MBAM that I can't seem to find much on and was hoping maybe someone has experienced something similar.

 

I am trying to use the method documented here as part of a Task Sequence in ConfigMgr - https://technet.microsoft.com/itpro/mdop/mbam-v25/how-to-enable-bitlocker-by-using-mbam-as-part-of-a-windows-deploymentmbam-25

 

I am using the MS provided Powershell script Invoke-MbamClientDeployment.ps1 -RecoveryServiceEndpoint "https://FQDN/MBAMRecoveryAndHardwareService/CoreService.svc"- IgnoreEscrowOwnerAuthFailure

 

At the moment this step fails with 0x0000001 incorrect function. I'm not sure which function that is exactly. In the smsts.log the offending error is attached.

 

Cheers guys.

 

 

[anyweb]

without more info and the smsts.log file it's hard to troubleshoot, but are you sure the script itself is running ok ? at the point where it fails, bring up a command prompt, and run the script manually, does it work without error ?

[djwyld]

We recently had this problem when building devices that don't have a physical keyboard (surface pro, tablet etc). Basically bitlocker doesn't think you will be able to enter a pin at startup so errors out.

 

You can get around this by setting some reg keys in the TS to override the behavior, follow this URL for instructions: https://blog.basevision.ch/2014/07/deploy-tablets-like-surface-or-lenovo-helix-with-windows-8-1-and-bitlocker/