Win2K8 Activation with KMS

J

Joe

I have just installed my first two Win2K8 servers in my Win2K3 network. I
activated both servers using my volume license keys, similar to what I would
do with Win2K3, and assumed everything was OK. However, now I'm seeing the
following error:

Publishing the Key Management Service (KMS) to DNS in the 'domain.com'
domain failed. Info: hr=0x80072338.

The interesting thing is that this error is only showing up on one of the
Win2K8 servers. I do not have KMS installed on the network. I was going to
install the KSM service on my domain controller, but the requirements state
that I need 5 servers before KMS will work. Am I missing something? Will my
one server stop working soon because it doesn't think its activated? Will I
accomplish anything by installing KMS on the network if I don't have 5
machines? The license type for both Win2K8 servers are KMS B licenses.

Thanks,
Joe
 

My Computer

D

Darrell Gorter[MSFT]

Hello Joe,
You do have KMS running on your network, I am guessing you used your KMS
key to activate those machines and they are now trying to register with
your DNS server.
Open and elevated CMD prompt and run slmgr /dlv and report back the output.

The error is not causing any issues, it simply cannot reigster itself so
KMS clients cannot use DNS to locate it. Once you get to the 5 more
servers then it may become more important
Thanks,
Darrell Gorter[MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights
--------------------
| >Thread-Topic: Win2K8 Activation with KMS
| >thread-index: AcoPqraem6k/tpxYRU+X4znTv85Zpg==
| >X-WBNR-Posting-Host: 12.145.167.134
| >From: =?Utf-8?B?Sm9l?= <[email protected]>
| >Subject: Win2K8 Activation with KMS
| >Date: Tue, 28 Jul 2009 10:42:01 -0700
| >Lines: 18
| >Message-ID: <[email protected]>
| >MIME-Version: 1.0
| >Content-Type: text/plain;
| > charset="Utf-8"
| >Content-Transfer-Encoding: 7bit
| >X-Newsreader: Microsoft CDO for Windows 2000
| >Content-Class: urn:content-classes:message
| >Importance: normal
| >Priority: normal
| >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.3168
| >Newsgroups: microsoft.public.windows.server.general
| >Path: TK2MSFTNGHUB02.phx.gbl
| >Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.general:59458
| >NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| >X-Tomcat-NG: microsoft.public.windows.server.general
| >
| >I have just installed my first two Win2K8 servers in my Win2K3 network.
I
| >activated both servers using my volume license keys, similar to what I
would
| >do with Win2K3, and assumed everything was OK. However, now I'm seeing
the
| >following error:
| >
| >Publishing the Key Management Service (KMS) to DNS in the 'domain.com'
| >domain failed. Info: hr=0x80072338.
| >
| >The interesting thing is that this error is only showing up on one of
the
| >Win2K8 servers. I do not have KMS installed on the network. I was
going to
| >install the KSM service on my domain controller, but the requirements
state
| >that I need 5 servers before KMS will work. Am I missing something?
Will my
| >one server stop working soon because it doesn't think its activated?
Will I
| >accomplish anything by installing KMS on the network if I don't have 5
| >machines? The license type for both Win2K8 servers are KMS B licenses.
| >
| >Thanks,
| >Joe
| >
 

My Computer

J

Joe

Darrell,
Thanks for the reply. I ran slmgr as requested and it shows that KMS IS
installed on this server. (Although it does not show up as an installed
program, role, or feature.) It also shows that the license status is
"licensed" using a "Volume_KMS_B Channel" license. (Unfortunately I can't
copy/paste the content of the window, and I couldn't find a log entry with
the slmgr results either.)

DNS publishing is enabled, so I guess I need to dig into why it is unable to
register itself in DNS. I have AD-enabled DNS servers configured on two
domain controllers that should allow dynamic updates. Any thoughts on why
this error occurs?

Thanks again,
Joe

""Darrell Gorter[MSFT]"" wrote:

> Hello Joe,
> You do have KMS running on your network, I am guessing you used your KMS
> key to activate those machines and they are now trying to register with
> your DNS server.
> Open and elevated CMD prompt and run slmgr /dlv and report back the output.
>
> The error is not causing any issues, it simply cannot reigster itself so
> KMS clients cannot use DNS to locate it. Once you get to the 5 more
> servers then it may become more important
> Thanks,
> Darrell Gorter[MSFT]
>
> This posting is provided "AS IS" with no warranties, and confers no rights
> --------------------
> | >Thread-Topic: Win2K8 Activation with KMS
> | >thread-index: AcoPqraem6k/tpxYRU+X4znTv85Zpg==
> | >X-WBNR-Posting-Host: 12.145.167.134
> | >From: =?Utf-8?B?Sm9l?= <[email protected]>
> | >Subject: Win2K8 Activation with KMS
> | >Date: Tue, 28 Jul 2009 10:42:01 -0700
> | >Lines: 18
> | >Message-ID: <[email protected]>
> | >MIME-Version: 1.0
> | >Content-Type: text/plain;
> | > charset="Utf-8"
> | >Content-Transfer-Encoding: 7bit
> | >X-Newsreader: Microsoft CDO for Windows 2000
> | >Content-Class: urn:content-classes:message
> | >Importance: normal
> | >Priority: normal
> | >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.3168
> | >Newsgroups: microsoft.public.windows.server.general
> | >Path: TK2MSFTNGHUB02.phx.gbl
> | >Xref: TK2MSFTNGHUB02.phx.gbl
> microsoft.public.windows.server.general:59458
> | >NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
> | >X-Tomcat-NG: microsoft.public.windows.server.general
> | >
> | >I have just installed my first two Win2K8 servers in my Win2K3 network.
> I
> | >activated both servers using my volume license keys, similar to what I
> would
> | >do with Win2K3, and assumed everything was OK. However, now I'm seeing
> the
> | >following error:
> | >
> | >Publishing the Key Management Service (KMS) to DNS in the 'domain.com'
> | >domain failed. Info: hr=0x80072338.
> | >
> | >The interesting thing is that this error is only showing up on one of
> the
> | >Win2K8 servers. I do not have KMS installed on the network. I was
> going to
> | >install the KSM service on my domain controller, but the requirements
> state
> | >that I need 5 servers before KMS will work. Am I missing something?
> Will my
> | >one server stop working soon because it doesn't think its activated?
> Will I
> | >accomplish anything by installing KMS on the network if I don't have 5
> | >machines? The license type for both Win2K8 servers are KMS B licenses.
> | >
> | >Thanks,
> | >Joe
> | >
>
>
 

My Computer

D

Darrell Gorter[MSFT]

Hello Joe,
let's start with this link
http://technet.microsoft.com/en-us/library/cc303280.aspx
Have you done this portion?

Configure DNS for KMS Activation
KMS hosts automatically publish their existence by creating service (SRV)
resource records in the DNS server. If you have only one KMS host and DDNS,
no action is required for the KMS host to create the SRV record that
publishes the KMS service. However, if you have more than one KMS host,
only the first KMS host can create an SRV record. Subsequent KMS hosts
cannot change or update SRV records unless the default permissions on the
DNS server are changed.

Change the Default SRV Permissions
To complete this procedure you must have administrative rights in the
domain and the KMS hosts must all belong to the same Active Directory®
domain.

To change the default SRV permissions on a Microsoft DNS server

1. Create a global security group in Active Directory for your KMS
hosts.

2. Add each of your KMS hosts to the new security group.

3. Set the permissions on the DNS server to allow updates by members
of the KMS host security group.


Thanks,
Darrell Gorter[MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights
--------------------
| >Thread-Topic: Win2K8 Activation with KMS
| >thread-index: AcoQUEHBvVXInYCsRVSbxgC27xQPzg==
| >X-WBNR-Posting-Host: 12.145.167.134
| >From: =?Utf-8?B?Sm9l?= <[email protected]>
| >References: <[email protected]>
<[email protected]>
| >Subject: RE: Win2K8 Activation with KMS
| >Date: Wed, 29 Jul 2009 06:27:02 -0700
| >Lines: 85
| >Message-ID: <[email protected]>
| >MIME-Version: 1.0
| >Content-Type: text/plain;
| > charset="Utf-8"
| >Content-Transfer-Encoding: 7bit
| >X-Newsreader: Microsoft CDO for Windows 2000
| >Content-Class: urn:content-classes:message
| >Importance: normal
| >Priority: normal
| >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4325
| >Newsgroups: microsoft.public.windows.server.general
| >Path: TK2MSFTNGHUB02.phx.gbl
| >Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.general:59481
| >NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| >X-Tomcat-NG: microsoft.public.windows.server.general
| >
| >Darrell,
| >Thanks for the reply. I ran slmgr as requested and it shows that KMS IS
| >installed on this server. (Although it does not show up as an installed
| >program, role, or feature.) It also shows that the license status is
| >"licensed" using a "Volume_KMS_B Channel" license. (Unfortunately I
can't
| >copy/paste the content of the window, and I couldn't find a log entry
with
| >the slmgr results either.)
| >
| >DNS publishing is enabled, so I guess I need to dig into why it is
unable to
| >register itself in DNS. I have AD-enabled DNS servers configured on two
| >domain controllers that should allow dynamic updates. Any thoughts on
why
| >this error occurs?
| >
| >Thanks again,
| >Joe
| >
| >""Darrell Gorter[MSFT]"" wrote:
| >
| >> Hello Joe,
| >> You do have KMS running on your network, I am guessing you used your
KMS
| >> key to activate those machines and they are now trying to register
with
| >> your DNS server.
| >> Open and elevated CMD prompt and run slmgr /dlv and report back the
output.
| >>
| >> The error is not causing any issues, it simply cannot reigster itself
so
| >> KMS clients cannot use DNS to locate it. Once you get to the 5 more
| >> servers then it may become more important
| >> Thanks,
| >> Darrell Gorter[MSFT]
| >>
| >> This posting is provided "AS IS" with no warranties, and confers no
rights
| >> --------------------
| >> | >Thread-Topic: Win2K8 Activation with KMS
| >> | >thread-index: AcoPqraem6k/tpxYRU+X4znTv85Zpg==
| >> | >X-WBNR-Posting-Host: 12.145.167.134
| >> | >From: =?Utf-8?B?Sm9l?= <[email protected]>
| >> | >Subject: Win2K8 Activation with KMS
| >> | >Date: Tue, 28 Jul 2009 10:42:01 -0700
| >> | >Lines: 18
| >> | >Message-ID: <[email protected]>
| >> | >MIME-Version: 1.0
| >> | >Content-Type: text/plain;
| >> | > charset="Utf-8"
| >> | >Content-Transfer-Encoding: 7bit
| >> | >X-Newsreader: Microsoft CDO for Windows 2000
| >> | >Content-Class: urn:content-classes:message
| >> | >Importance: normal
| >> | >Priority: normal
| >> | >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.3168
| >> | >Newsgroups: microsoft.public.windows.server.general
| >> | >Path: TK2MSFTNGHUB02.phx.gbl
| >> | >Xref: TK2MSFTNGHUB02.phx.gbl
| >> microsoft.public.windows.server.general:59458
| >> | >NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| >> | >X-Tomcat-NG: microsoft.public.windows.server.general
| >> | >
| >> | >I have just installed my first two Win2K8 servers in my Win2K3
network.
| >> I
| >> | >activated both servers using my volume license keys, similar to
what I
| >> would
| >> | >do with Win2K3, and assumed everything was OK. However, now I'm
seeing
| >> the
| >> | >following error:
| >> | >
| >> | >Publishing the Key Management Service (KMS) to DNS in the
'domain.com'
| >> | >domain failed. Info: hr=0x80072338.
| >> | >
| >> | >The interesting thing is that this error is only showing up on one
of
| >> the
| >> | >Win2K8 servers. I do not have KMS installed on the network. I was
| >> going to
| >> | >install the KSM service on my domain controller, but the
requirements
| >> state
| >> | >that I need 5 servers before KMS will work. Am I missing
something?
| >> Will my
| >> | >one server stop working soon because it doesn't think its
activated?
| >> Will I
| >> | >accomplish anything by installing KMS on the network if I don't
have 5
| >> | >machines? The license type for both Win2K8 servers are KMS B
licenses.
| >> | >
| >> | >Thanks,
| >> | >Joe
| >> | >
| >>
| >>
| >
 

My Computer

J

Joe

Darrell,
Thanks much. That does help explain things. I created the security group
added permissions to the DNS zone in question. I 'think' I did it correctly.
There is no explicit permission for "allow updates", so I set the 'read',
'write', and 'create all child objects' permissions. If you think I missed
something there please let me know.

Thanks again.
Joe

""Darrell Gorter[MSFT]"" wrote:

> Hello Joe,
> let's start with this link
> http://technet.microsoft.com/en-us/library/cc303280.aspx
> Have you done this portion?
>
> Configure DNS for KMS Activation
> KMS hosts automatically publish their existence by creating service (SRV)
> resource records in the DNS server. If you have only one KMS host and DDNS,
> no action is required for the KMS host to create the SRV record that
> publishes the KMS service. However, if you have more than one KMS host,
> only the first KMS host can create an SRV record. Subsequent KMS hosts
> cannot change or update SRV records unless the default permissions on the
> DNS server are changed.
>
> Change the Default SRV Permissions
> To complete this procedure you must have administrative rights in the
> domain and the KMS hosts must all belong to the same Active Directory®
> domain.
>
> To change the default SRV permissions on a Microsoft DNS server
>
> 1. Create a global security group in Active Directory for your KMS
> hosts.
>
> 2. Add each of your KMS hosts to the new security group.
>
> 3. Set the permissions on the DNS server to allow updates by members
> of the KMS host security group.
>
>
> Thanks,
> Darrell Gorter[MSFT]
>
> This posting is provided "AS IS" with no warranties, and confers no rights
> --------------------
> | >Thread-Topic: Win2K8 Activation with KMS
> | >thread-index: AcoQUEHBvVXInYCsRVSbxgC27xQPzg==
> | >X-WBNR-Posting-Host: 12.145.167.134
> | >From: =?Utf-8?B?Sm9l?= <[email protected]>
> | >References: <[email protected]>
> <[email protected]>
> | >Subject: RE: Win2K8 Activation with KMS
> | >Date: Wed, 29 Jul 2009 06:27:02 -0700
> | >Lines: 85
> | >Message-ID: <[email protected]>
> | >MIME-Version: 1.0
> | >Content-Type: text/plain;
> | > charset="Utf-8"
> | >Content-Transfer-Encoding: 7bit
> | >X-Newsreader: Microsoft CDO for Windows 2000
> | >Content-Class: urn:content-classes:message
> | >Importance: normal
> | >Priority: normal
> | >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4325
> | >Newsgroups: microsoft.public.windows.server.general
> | >Path: TK2MSFTNGHUB02.phx.gbl
> | >Xref: TK2MSFTNGHUB02.phx.gbl
> microsoft.public.windows.server.general:59481
> | >NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
> | >X-Tomcat-NG: microsoft.public.windows.server.general
> | >
> | >Darrell,
> | >Thanks for the reply. I ran slmgr as requested and it shows that KMS IS
> | >installed on this server. (Although it does not show up as an installed
> | >program, role, or feature.) It also shows that the license status is
> | >"licensed" using a "Volume_KMS_B Channel" license. (Unfortunately I
> can't
> | >copy/paste the content of the window, and I couldn't find a log entry
> with
> | >the slmgr results either.)
> | >
> | >DNS publishing is enabled, so I guess I need to dig into why it is
> unable to
> | >register itself in DNS. I have AD-enabled DNS servers configured on two
> | >domain controllers that should allow dynamic updates. Any thoughts on
> why
> | >this error occurs?
> | >
> | >Thanks again,
> | >Joe
> | >
> | >""Darrell Gorter[MSFT]"" wrote:
> | >
> | >> Hello Joe,
> | >> You do have KMS running on your network, I am guessing you used your
> KMS
> | >> key to activate those machines and they are now trying to register
> with
> | >> your DNS server.
> | >> Open and elevated CMD prompt and run slmgr /dlv and report back the
> output.
> | >>
> | >> The error is not causing any issues, it simply cannot reigster itself
> so
> | >> KMS clients cannot use DNS to locate it. Once you get to the 5 more
> | >> servers then it may become more important
> | >> Thanks,
> | >> Darrell Gorter[MSFT]
> | >>
> | >> This posting is provided "AS IS" with no warranties, and confers no
> rights
> | >> --------------------
> | >> | >Thread-Topic: Win2K8 Activation with KMS
> | >> | >thread-index: AcoPqraem6k/tpxYRU+X4znTv85Zpg==
> | >> | >X-WBNR-Posting-Host: 12.145.167.134
> | >> | >From: =?Utf-8?B?Sm9l?= <[email protected]>
> | >> | >Subject: Win2K8 Activation with KMS
> | >> | >Date: Tue, 28 Jul 2009 10:42:01 -0700
> | >> | >Lines: 18
> | >> | >Message-ID: <[email protected]>
> | >> | >MIME-Version: 1.0
> | >> | >Content-Type: text/plain;
> | >> | > charset="Utf-8"
> | >> | >Content-Transfer-Encoding: 7bit
> | >> | >X-Newsreader: Microsoft CDO for Windows 2000
> | >> | >Content-Class: urn:content-classes:message
> | >> | >Importance: normal
> | >> | >Priority: normal
> | >> | >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.3168
> | >> | >Newsgroups: microsoft.public.windows.server.general
> | >> | >Path: TK2MSFTNGHUB02.phx.gbl
> | >> | >Xref: TK2MSFTNGHUB02.phx.gbl
> | >> microsoft.public.windows.server.general:59458
> | >> | >NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
> | >> | >X-Tomcat-NG: microsoft.public.windows.server.general
> | >> | >
> | >> | >I have just installed my first two Win2K8 servers in my Win2K3
> network.
> | >> I
> | >> | >activated both servers using my volume license keys, similar to
> what I
> | >> would
> | >> | >do with Win2K3, and assumed everything was OK. However, now I'm
> seeing
> | >> the
> | >> | >following error:
> | >> | >
> | >> | >Publishing the Key Management Service (KMS) to DNS in the
> 'domain.com'
> | >> | >domain failed. Info: hr=0x80072338.
> | >> | >
> | >> | >The interesting thing is that this error is only showing up on one
> of
> | >> the
> | >> | >Win2K8 servers. I do not have KMS installed on the network. I was
> | >> going to
> | >> | >install the KSM service on my domain controller, but the
> requirements
> | >> state
> | >> | >that I need 5 servers before KMS will work. Am I missing
> something?
> | >> Will my
> | >> | >one server stop working soon because it doesn't think its
> activated?
> | >> Will I
> | >> | >accomplish anything by installing KMS on the network if I don't
> have 5
> | >> | >machines? The license type for both Win2K8 servers are KMS B
> licenses.
> | >> | >
> | >> | >Thanks,
> | >> | >Joe
> | >> | >
> | >>
> | >>
> | >
>
>
 

My Computer

Top