Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 8296
  • Last Modified:

KMS vs. MAK activation for Windows Server 2008

I'm getting concerned that all of a sudden some of my Server 2008 servers will become not activated anymore. I get this event ID: 12293 Source: Security-licensing-SLC    in the event log every day or so. I feel like I get more confused every time I read about differences between KMS and MAK.

Right now all my 2008 servers were activated using KMS. The 2008 domain controllers are the only ones that are getting successfully published in DNS.

Am I okay? Or do I have to do further configuration? Should I disable DNS publishing for KMS on the non-DC servers?
0
fina27
Asked:
fina27
  • 5
  • 4
1 Solution
 
dvast8nCommented:
If you had to choose one or the other I would do MAK. With KMS the servers would have to contact the KMS to keep themselves active. This usually happens on a weekly basis and can go upto 180 days without contact. Now if you were to have something go wrong with your KMS key you are solely depending on Microsoft to resolve the issue.

Here's a quick list from Ryan Kononoff site:

KMS Pros:
Activation is automated. New servers will attempt to discover the KMS via DNS (an SRV record) and activate automatically.
Internet access is not required as servers only require access to the KMS.
KMS Cons:
KMS clients must contact the KMS host every 180 days. This means availability is important though it is worth mentioning that the activation grace period still applies.
KMS Hosts must renew their activation every 180 days. Again, availability is important.
A minimum of 5 KMS clients are required in order to activate KMS.

Other notes worth mentioning:
The number of required activation keys are reduced by grouping activations: DataCenter/Itanium, Enterprise/Standard, Web, Vista Ent/Bus.

MAK Pros:
No "expiration" on activations. In other words, once a host is activated, it will remain activated (assuming no major hardware changes take place).
No additional infrastructure is required.
More sleep at night :-) With KMS, all windows servers activate and remain activated by contacting an internally hosted service. With MAK, you simply activate once through Microsoft and walk away.
Works out of the box. No minimum number of hosts required nor are changes to DNS required.
MAK Cons:
Every host must be manually activated.
Once your alloted activations are used up on a single key, you must contact Microsoft to complete the activation process.
0
 
dvast8nCommented:
ADD ON:

Note that the last con for KMS. "A minimum of 5 KMS clients are required in order to activate KMS."

This could be the reason why the servers are not active.
0
 
fina27Author Commented:
Ok so just to tell a little about my environment...... I have 5 Server 2008 servers right now that I activated under KMS. Three of the servers are DCs and aren't having this error.

Should I only change the other two servers to MAK? Or should I change them all to MAK?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
fina27Author Commented:
And I'm guessing I just logon to the Eopen website and click "New MAK Keys" on the corresponding license agreement? I bought 6 Server 2008 licenses.
0
 
dvast8nCommented:
If it were me I would covert them all over to MAK. I think Ron Popeil says it best...."Set it and forget it!"
0
 
dvast8nCommented:
Here's a good quick FAQ on Windows 2008 Activation for both MAK and KMS.

http://www.microsoft.com/licensing/existing-customers/windows-activation-faq.aspx

It is possible to have a mix of KMS and MAK so if you didn't want to mess with the servers that are already activated, you don't have to.
0
 
fina27Author Commented:
Okay i converted one server over to MAK no problems.

Well they are all activated. I'm guessing only the servers that get the 12293 error will become un-activated after 180 days? And the servers that are getting the 12294 successful log will stay activated?
0
 
fina27Author Commented:
Yep. What I guessed is correct. You've been very helpful dvast8n!
0
 
dvast8nCommented:
I'm glad I could help! Thank you for the feedback. I appreciate it.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now