Volume Activation 2.0 is designed to automate and manage the activation process
for volume licensing customers. This document provides operational guidance for
Microsoft Volume Licensing customers who have deployed Volume Activation 2.0 in
their organization’s environment.
1
Volume Activation 2.0 Operations Guide
This document and any document referenced herein is provided for informational purposes only and Microsoft
makes no warranties, either express or implied, in this document. Information in this document, including URL and
other Internet Web site references, is subject to change without notice. The entire risk of the use or the results
from the use of this document remains with the user. Unless otherwise noted, the companies, organizations,
products, domain names, e-mail addresses, logos, people, places, and events depicted in examples herein are
fictitious. No association with any real company, organization, product, domain name, e-mail address, logo,
person, place, or event is intended or should be inferred. Complying with all applicable copyright laws is the
responsibility of the user. Without limiting the rights under copyright, no part of this document may be
reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic,
mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of
Microsoft Corporation.
Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights
covering subject matter in this document. Except as expressly provided in any written license agreement from
Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights,
Microsoft, Active Directory, Windows, Windows Server, and Windows Vista, are either registered trademarks or
trademarks of Microsoft Corporation in the United States and/or other countries.
The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
Appendix 2: Troubleshooting by Error Code ........................................................................... 32
3
Volume Activation 2.0 Operations Guide
Introduction
This guide contains information to assist you in managing the activations of volume
editions of Windows Vista® and Windows Server® 2008 in your environment. Topics
covered include available management tools, troubleshooting, recovery from
unlicensed states, and resolving Non-Genuine issues, as well as specific information
on managing each method of volume activation.
Management Tools for Volume Activation
There are several tools available to monitor and manage the activation status of
volume license editions of Windows Vista and Windows Server 2008.
Volume Activation Management Tool (VAMT)
VAMT enables you to manage MAK-activated systems in your environment. VAMT
collects data on both MAK Proxy and MAK Independent activation clients, including
information about product keys and current license states. VAMT stores MAKs in a
computer information list (CIL) file. This allows administrators to query the online
Microsoft® Activation servers to determine the number of activations remaining on
an organization’s MAKs. The CIL is an XML file and is readable using any text editor,
such as Notepad.
For more information about VAMT, see the VAMT Step by Step Guide that is
included with the VAMT installation files. You can download VAMT at
http://go.microsoft.com/fwlink/?LinkID=77533.
Systems Management Server (SMS) 2003 SP3
Systems Management Server (SMS) 2003 Service Pack 3 (SP3) contains built-in
asset intelligence reporting, which utilizes Windows® Management Interface (WMI)
to generate detailed activation reports for MAK- and KMS-activated Windows Vista
and Windows Server 2008 computers.
4
Volume Activation 2.0 Operations Guide
Group Policy Support
There are no specific settings for volume activation in Group Policy. However, all
configuration and property data for VA 2.0 is accessible though WMI and the
Windows registry, and can therefore be managed with Group Policy.
Volume Activation Troubleshooting
All activation events are logged. The event provider name for all activation events is
Microsoft-Windows-Security-Licensing-SLC. These events are saved to the Windows
Application event log, except the KMS activity events that have the event number
12290. These events are saved to the Key Management Service log that is located
in the Applications and Services folder.
You can use Slui.exe to display a description of most activation-related error codes.
The following is the general syntax for this command:
Slui.exe 0x2a ErrorCode
For example, if event 12293 contains error code 0x8007267C, you can display a
description of that error by running the following command:
Slui.exe 0x2a 0x8007267C
KMS Activation Troubleshooting Steps
The following table presents common issues that can occur during KMS activations
and steps you can take to resolve these issues.
Table 1: Troubleshooting Steps for Common KMS Activation Issues
Issue Resolution
Is the computer
activated?
The computer
will not activate.
Look for Windows is activated in the Welcome Center or in
the System application in Control Panel. You can also run
Slmgr.vbs with the /dli parameter.
Verify that the KMS activation threshold is met. Run Slmgr.vbs
with the /dli parameter on the KMS host to determine the
host’s current count. Until the KMS host has a count of 25,
Windows Vista clients do not activate. Windows Server 2008
KMS clients require a KMS count of 5 to activate.
On the KMS client, look in the Application event log for event
5
Volume Activation 2.0 Operations Guide
12289.
slmgr.vbs
-
ipk <
SetupKey
>.
Issue Resolution
Check this event for the following:
•
Is the result code 0? Anything else is an error.
•
Is the KMS host name in the event correct?
•
Is the KMS port correct?
•
Is the KMS host accessible?
•
If the client is running a third-party firewall, do you need
to configure the outbound port?
On the KMS host, look in the KMS event log for event 12290.
Check this event for the following:
•
Did the KMS host log a request from the client computer?
Verify that the name of the KMS client is listed. Verify
that the client and KMS host can communicate. Did the
client receive the response? Ensure that routers do not
block traffic using TCP port 1688, if you are using the
default port, and that stateful traffic to the KMS client is
allowed.
•
If no event is logged from the KMS client, the request did
not reach the KMS host or the KMS host was unable to
process it.
What does this
error code mean?
Clients are not
adding to the
KMS count.
KMS hosts are
unable to create
SRV records on a
non-Microsoft
DNS server.
Only the first
KMS host is able
to create SRV
records on a
Microsoft DNS
server.
If Slmgr.vbs returns a hexadecimal error code, or event 12288
contains a result code other than 0, determine the
corresponding error message by running the following
command:
Slui.exe 0x2a ErrorCode
You need to run
sysprep /generalize
or
slmgr /rearm
to
reset the client computer ID (CMID) and other product
activation information. Otherwise, each client computer looks
identical and the KMS host does not count them as separate
KMS clients.
Your DNS may restrict write access, or may not support
dynamic DNS (DDNS). In this case, you need to give the KMS
host write access to the DNS database or create the SRV record
manually. For more information about this, see the Volume Activation 2.0 Deployment Guide.
If you have more than one KMS host, the other hosts are not
able to update the SRV record unless the SRV default
permissions are changed. See. For more information about this,
see the Volume Activation 2.0 Deployment Guide.
I installed a KMS
key on the KMS
KMS keys should only be installed on KMS hosts and should not
be installed on KMS clients. Run
6
Volume Activation 2.0 Operations Guide
client.
The
Volume Activation 2.0 Deployment Guide
contains a table of
Issue Resolution
setup keys that you can use to revert the computer back to a
KMS client. These keys are publicly known and are editionspecific. Remember to delete any unnecessary SRV resource
records from DNS and restart the computers.
MAK Activation Troubleshooting Steps
The following table presents common issues that can occur during MAK activations
and steps you can take to resolve these issues.
Table 2: Troubleshooting Steps for Common MAK Activation Issues
Issue Resolution
How can I tell if my
computer is
activated?
The computer will not
activate over the
Internet.
Look for Windows is activated in the Welcome Center or
in the System application in Control Panel. You can also run
Slmgr.vbs with the /dli parameter.
Ensure that the computer can access the Internet. Confirm
and configure any necessary proxy settings, using either the
Internet browser or Control Panel. If the computer is not
able to connect to the Internet, use telephone activation.
Internet and
telephone activation
fail.
Contact your local activation center. For phone numbers of
activation centers worldwide, go to
http://go.microsoft.com/fwlink/?LinkID=107418. You need
to provide your Volume License agreement information and
proof of purchase when you call.
Slmgr.vbs /ato
returns an error
code.
If Slmgr.vbs returns a hexadecimal error code, determine
the corresponding error message by running the following
script:
Slui.exe 0x2a 0x ErrorCode
Volume Activation Operations
KMS Health Monitoring
You can monitor KMS activations using the Key Management Service (KMS)
Management Pack for System Center Operations Manager (Ops Mgr) 2005. The
KMS Management Pack monitors the health of KMS hosts by checking for error
conditions and availability. It alerts administrators about potential problems such as
7
Volume Activation 2.0 Operations Guide
KMS initialization failures, DNS SRV publishing issues, when KMS counts drop below
activation thresholds, and when no KMS activity occurs for more than 8 hours.
To download the KMS Management Pack, go to the System Center Operations
Manager product catalog at http://go.microsoft.com/fwlink/?LinkID=110332. This
download includes a Management Pack guide that covers installation, configuration,
and included rules. Several sample reports are also included, as well as data
grooming and indexing processes.
KMS Activity Reporting
If an OpsMgr 2005 agent is installed on KMS hosts, the event log data generated on
the KMS host is collected and forwarded to the Operations data warehouse. The
data is then aggregated in the Operations data warehouse, so it is available for
reports. Table 3 describes the reports that are included in the KMS Management
Pack.
Table 3: Reports Included in the KMS Management Pack
Report Name Description
Activation Count
Summary
Virtual Machine
Summary
KMS Activity
Summary
Displays the number of KMS activations for each Windows edition across a
number of historical time ranges.
Displays, by Windows edition, the number of virtual and physical KMS
client computers that have activated in the past 14 days.
Displays new KMS activations for each Windows edition within the past
day. You can display data from all KMS hosts or you can add a filter to
display data from a subset of KMS hosts.
Licensing Status
Summary
Displays the number of days left until a KMS client needs to renew its
activation, as well as the license state for each KMS client that has
connected to a KMS host.
Machine
Expiration Chart
Displays the number of computers that are in an Initial/Out of Box (OOB),
Out of time (OOT)/Expired, or Non-Genuine grace periods, and which could
go to an unlicensed condition in the next 30 days.
Machine
Expiration Detail
Lists the computers that are in Initial/Out of Box (OOB), Out of time
(OOT)/Expired, or Non-Genuine grace periods and which could go to an
RFM condition in the next 7 days.
8
Volume Activation 2.0 Operations Guide
Working with 64-Bit Windows Vista KMS Hosts
The OpsMgr 2005 agent is available only as a 32-bit application. As a result, 64-bit
versions of Windows Vista RTM are not automatically added to the KMS computer
group defined by the KMS Management Pack. KMS hosts running Windows Vista
SP1 or Windows Server 2008 are not affected by this issue. Computers that are not
a member of this group do not send data to Operations data warehouse. Since
reports are generated from this data warehouse, computers with 64-bit versions of
Windows Vista are not automatically included in KMS management pack reports.
To resolve this issue, you can create a custom Computer Group on the OpsMgr
2005 console and add the 64-bit Windows Vista RTM KMS hosts to it.
KMS Host Failover
If a KMS host fails, you must install a KMS key on a new host and activate it. You
then need to ensure that the new KMS host has an SRV resource record in the DNS
database. If you install the new KMS host with the same computer name and IP
address as the failed KMS host, the new KMS host can use the DNS SRV record of
the failed host. If the new host has a different computer name, you need to
manually remove the DNS SRV record of the failed host. If your network is using
DDNS, the new KMS host automatically creates a new SRV record in the DNS
server. The new KMS host then starts collecting client renewal requests and begins
activating clients as soon as the KMS activation threshold is met.
If your KMS clients are using auto-discovery, they automatically choose another
KMS host if their original KMS host does not respond to renewal requests. If you are
not using auto-discovery, you need to update the KMS client computers that were
assigned to the failed KMS host.
Disabling Windows Anytime Upgrade for Windows Vista
The Windows Anytime Upgrade (WAU) program allows Windows Vista Business
users to purchase an upgrade directly from Microsoft by clicking the Windows
Anytime Upgrade link in the Extras and Upgrades subfolder of the All
9
Volume Activation 2.0 Operations Guide
1. Log on to
the client computer
.
Programs menu. This link and the program are only in Windows Vista Business
editions available through volume-licensed and retail channels.
System administrators can choose to disable WAU for users by adding a registry
value to the reference image before deploying Windows. When WAU is disabled and
the user clicks the WAU link, the error message, shown in Figure 1, appears. This
prevents the user from obtaining an upgrade license using Control Panel.
Figure 1: Disabled WAU
Warning
might occur if you modify the registry incorrectly by using Registry Editor or by using
another method. These problems might require that you reinstall the operating system.
Microsoft cannot guarantee that these problems can be solved. Modify the registry at your
own risk.
Some procedures in this section contain registry changes. Serious problems
To disable the WAU link
2. Open an elevated command prompt. To do this, click Start, click All Programs,
click Accessories, right-click Command Prompt, and then click Run as
administrator.
3. At the command prompt, type regedit.exe and then press Enter.