<div>
I think the latter would be the way to go. KMS doesn't really integrate into AD (only uses DNS which technically is a part of AD).<br />
So you can't limit it to an OU but need to address this on a network level.
</div>


I think the latter would be the way to go. KMS doesn't really integrate into AD (only uses DNS which technically is a part of AD).
So you can't limit it to an OU but need to address this on a network level.

<div>
Have a look at this:<br />
<a href="http://technet.microsoft.com/en-us/library/ff793431" rel="ugc">http://technet.microsoft.com/en-us/library/ff793431</a><br />
and this<br />
<a href="http://technet.microsoft.com/en-us/library/ff793418#EWAA" rel="ugc">http://technet.microsoft.com/en-us/library/ff793418#EWAA</a><br />
<br />
though yes you can just add them both then limit the ports on the firewall. It picks them at random until it finds one that works. <a href="http://technet.microsoft.com/en-us/library/ff793434.aspx" rel="ugc">http://technet.microsoft.com/en-us/library/ff793434.aspx</a>&nbsp;see &quot;client discovery&quot; section
</div>


Have a look at this:
http://technet.microsoft.com/en-us/library/ff793431 [http://technet.microsoft.com/en-us/library/ff793431]
and this
http://technet.microsoft.com/en-us/library/ff793418#EWAA [http://technet.microsoft.com/en-us/library/ff793418#EWAA]

though yes you can just add them both then limit the ports on the firewall. It picks them at random until it finds one that works. http://technet.microsoft.com/en-us/library/ff793434.aspx [http://technet.microsoft.com/en-us/library/ff793434.aspx] see "client discovery" section

<div>
<div class="content wysiwyg-content">
Hello,<br />
<br />
We're using a big domain with many OU inside. Till now, I was the only one using KMS to activate my Windows and Office.<br />
<br />
But now, there is another OU which want to do the same.<br />
I don't want them to use my KMS because of licence key (we have separate contrat from microsoft).<br />
So my question, is it possible to limit a KMS to an OU ?<br />
Or should I publis multiple KMS and limit &quot;view&quot; by restriciting access-list on my firewall ?<br />
<br />
Any suggestions will be appreciate.<br />
Thx in advance.
</div>
</div>


Hello,

We're using a big domain with many OU inside. Till now, I was the only one using KMS to activate my Windows and Office.

But now, there is another OU which want to do the same.
I don't want them to use my KMS because of licence key (we have separate contrat from microsoft).
So my question, is it possible to limit a KMS to an OU ?
Or should I publis multiple KMS and limit "view" by restriciting access-list on my firewall ?

Any suggestions will be appreciate.
Thx in advance.

KMS Server limited to an OU

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.