Microsoft Desktop Optimisation Pack (MDOP) is a suite (portfolio) of technologies available to Software Assurance customers through an additional subscription. The following components are included in the MDOP suite: Microsoft Application Virtualization (App-V), Microsoft User Experience Virtualization (UE-V), Microsoft Advanced Group Policy Management (AGPM), Microsoft Diagnostics & Recovery Toolset (DaRT), and Microsoft BitLocker Administration and Monitoring (MBAM). MBAM is an administrator interface used to manage BitLocker drive encryption. It allows you to configure your enterprise with the correct BitLocker encryption policy options, as well as monitor compliance with these policies. Please see the following comprehensive guide on how to enable Bitlocker Pre-Boot Authentication via the Group Policy, and BitLocker PIN bypass: How to configure Network Unlock.
When configuring MBAM, you may get the following errors "Web application "Administration Portal" cannot be enabled because one or more software dependencies are not met". This is because, the stated prerequisites were not met CORRECTLY when installing MBAM. Kindly take a look at this guide on MBAM components: How to deploy Microsoft BitLocker Administration and Monitoring Tool.
As you can see also from the Event Viewer below, the Web application “Administration Portal” cannot be enabled because one or more software dependencies are not met. To resolve this issue, we will have to either install the prerequisites through the installation of the prerequisites via the portal or via PowerShell. Kindly refer to the following similar guides on BitLocker. How to view BitLocker disk encryption status in Windows, how to backup existing and new BitLocker recovery keys to Active Directory, BitLocker Drive Encryption architecture and implementation types on Windows, how to fix missing BitLocker Recovery Tab in Active Directory Users and Computers, and how to enable or disable BitLocker Drive Encryption on Windows 10 and Virtual Machines.
Solution – Install the Web Server, role services and features via PowerShell
To do this, run the following PowerShell Command to have all the Web Server, role services and features installed as shown below. When this command is run as you can see from the image below, the components will be installed unto the server. This command will ensure you aren’t missing any steps.
Add-WindowsFeature -Name "Web-Server", "Web-WebServer", "Web-Common-Http", "Web-Default-Doc", "Web-Dir-Browsing", "Web-Http-Errors", "Web-Static-Content", "Web-Health", "Web-Http-Logging", "Web-Performance", "Web-Stat-Compression", "Web-Security", "Web-Filtering", "Web-Windows-Auth", "Web-App-Dev", "Web-Net-Ext", "Web-Net-Ext45", "Web-Asp-Net", "Web-Asp-Net45", "Web-ISAPI-Ext", "Web-ISAPI-Filter", "Web-Mgmt-Tools", "Web-Mgmt-Console", "NET-Framework-Features", "NET-Framework-Core", "NET-Non-HTTP-Activ", "NET-Framework-45-Features", "NET-Framework-45-Core", "NET-Framework-45-ASPNET", "NET-WCF-Services45", "NET-WCF-HTTP-Activation45", "NET-WCF-TCP-Activation45", "NET-WCF-TCP-PortSharing45", "RDC", "WAS-Process-Model", "WAS-NET-Environment", "WAS-Config-APIs"
Now, you should be able to see in the image below that the command executed successfully.
Launch the Microsoft BitLocker Administration and Monitoring, the system will check for the prerequisite to ensure all the needed features are installed. You may also want to see this guide: MBAM reports automatic E-mail notification: How to create MBAM Enterprise and Compliance, and Recovery Audit reports.
As you can see below, the prerequisite check has completed and you can see a green check stating all prerequisites have been met. You can now proceed with the configuration of the MBAM components.
I hope you found this blog post helpful. If you have any questions, please let me know in the comment session.