Hi Everyone,
Running into an issue that others seem to have run into before, but I'm not having any luck in terms of resolution to the issue.
We setup MBAM 2.0 in our environment in the following configuration:
1. MBAM 2.0 Administration and Monitoring Point is installed on the SCCM 2012 SP1 server (all components except the DB including reports)
2. MBAM Databases installed on separate server running Windows Server 2008 R2 with SQL Server Enterprise 2008 R2.
The configuration appears to be working with HTTPS connections working to the SelfService and HelpDesk portals. We have the basic GPOs setup and confirmed they are being set on the test client.
We then enabled the TPM chip on our test laptops and installed the MBAM Client. After some time, the MBAM Agent prompts to encrypt the drive and proceeds with the encryption which completes successfully. All good!
On the client the MBAM Event log has an Operational log entries full of Event ID 1. (looks OK)
The MBAM Event log also has an Admin log entry that reads "An error occurred while sending encryption status data. Error code: 0x803d0013."
In researching that error, I found Microsoft article http://support.microsoft.com/kb/2612822/en-us and did those steps with no change. However, I then recalled that in the GPO we had also set the "MBAM Status reporting service end point" in the "Configure MBAM service" GPO but in re-reviewing the GPOs I realized this value should have been left blank (according to the Explanation included with the GPO). So we set this part of the GPO to DISABLED and blanked out the URL that had been specified.
Since doing that, the errors in the MBAM Admin event log have stopped appearing (they were appearing every 1 minute). I took that as a good sign, but if I look at my reports within SCCM 2012 they don't seem to be updating.
I've already set the ClientWakeupFrequency and StatusReportingFrequency and NoStartupDelay values to 1 for testing/troubleshooting purposes and restarted the MBAMAgent service.
Since updating the GPO I've run gpupdate /force and cycled the MBAMAgent service and have also rebooted the client machine (then reset the policy keys back to 1 since they flip back to 90 and 720 from the GPO update). I've also forced Hardware Inventory on the client.
QUESTION:
- If I look in the Compliance Status Report the "Last Update Date" for my test client is hours ago. What updates this value? Does it come in through Hardware Inventory? How do I force an update?
Any assistance is MUCH appreciated!
Thanks,
-Jeff