How to go about using SCCM2012 and deploying X64 and 32bit apps.

[DoD71]

Specifically I was wondering about Microsoft Bitlocker MBAM.... I have it setup so that I have MBAM on one SQL server separated from my 2012r2 SCCM server. I have it to where I can manually install the bitlocker client and it registers within the MBAM server. I also have it to where it is integrated with SCCM and I set up the MBAM collection properly (or at least according to it, I have around 1500 devices in that collection on SCCM server) I followed a wonderful guide from here:

 

http://eskonr.com/2015/09/how-to-install-mbam-2-5-sp1-and-integrate-with-sccm-configmgr-2012-r2-sp1-part-2/ Wonderful guide and easy to follow.... My problem is on the deployment of the MBAM client with SCCM, he assumes the reader has done that before...... I am a TOTAL noob with SCCM and not sure how to do this. Does anyone have a recommendation on the best way to accomplish this? We have a mixture of laptops, some 64 bit and some 32.... I would like to start off separating the two sets of laptops (32 and 64 bit), although we have a cobbled mixture of brands and models of laptops, but I assume that doesn't mater. So IOWs, I would like to push the 32 bit client to the 32 bit laptops and the 64 bit client to the 64 bit laptops.) I would really like to initially do this for a couple of test laptops, before I roll it out to all of them. Also, after I get that down pat, I would like to do the same with our tinys (Lenovo M93s) both 32 and 64 bit. Does anyone have a suggestion for how to accomplish this? TIA for any suggestions.

Edited June 8, 2016 by DoD71

[anyweb]

hi,

 

configuring MBAM from scratch including deploying the client agent is covered in lots of details in Chapter 13 of the Windows noob OSD guides for SCCM 2012 R2. It's available in hard copy and e-book from Amazon.

[DoD71]

Hello... I bought the book (had to wait this long to get it from Amazon) and it only shows how to deploy the x64 agent. My question was how to split the x64 from the x86.... Do you have to make two separate applications (x64 and 32) AND two separate collections for this? Any thoughts on this? Kinda sucked to wait this long for the book and then have the same question, although I am not upset because this book looks like it will be very helpful with a lot of different things I want to accomplish going forward.

 

Also, what happens on drives we already have encrypted with bitlocker?

 

Also, I just created a test collection to try this out... How do I add single computers in to try this out....

 

Thanks

Edited June 17, 2016 by DoD71

[anyweb]

thank you for buying the book i hope you like it !

 

so do you want to separate apps by architecture in order to target operating systems with different architecture ?

 

you can use deployment types to define what software gets installed on what architecture, look at the Requirements tab and select an os with a specific architecture, that way the software will only install if the requirements are met (eg: is x64)

 

 

you can of course then target (deploy) that app to a specific collection containing only the architecture matching the requirement,.

[DoD71]

Yes... I think this book will be very helpful for things I want to do, It is a very logical book... About deploying, I muddled my way through that and I think I have that ok... I do have another issue that is perplexing to me... Right now I am working with three systems... M93 tiny, and X1 carbon, 2nd generation and 1st generation... I did some tests and bitlockered the M93 tiny ahead of time and pushed the client to it and was impressed when the recovery key was automatically put in the database... Way cool on that...I pushed to client to the 2nd generation x1 carbon and everything is all good there... I then was going to try a third test where I push the client to my 1st generation X1 carbon and when I try to add it to my test collection like I did the other two it will not add.... I checked to see if it was in the default MBAM supported computers and it is not in there as well.... and I can't add it there either.... I am not sure why, because the Gen 1 X1 carbon has a TPM 1.2 chip and the system partition and is Win7... I think I should add that I had accidently deleted all computers from the MBAM supported computers collection and read that I needed to let the heartbeat refind them...so I did.... Originally I had around 1200 computers in the MBAM supported computer collection, but after letting this discovery for a week I only have 994 computers back in that collection...

 

Any ideas on this?