Solved

KMS is not functioning properly

Posted on 2013-11-20
3
292 Views
Last Modified: 2013-12-06
KMS(Key Management Service) is installed on one of Domain Controller but is is not functioning and clientmachines are showing windows need to update.
0
Comment
Question by:sanjayambre
  • 2
3 Comments
 
LVL 17

Expert Comment

by:Learnctx
ID: 39664706
You have the KMS SRV records setup? Under the forward lookup in DNS for your domain this record should exist. _VLMCS._tcp.yourchild.yourrootdomain.internal.

DNS > Server > Forward Lookup Zones > yourchild.yourrootdomain.internal > _tcp

If it exists check the settings. You want to have it set to use port 1688 and point to the FQDN of your KMS server. Priority and all of that can be set to 0.

If it does not exist, create a new SRV record. Right click _tcp > choose other new records > service location (SRV).

Service: _VLMCS
Protocol: _tcp
Weight: 0
Priority: 0
Port: 1688
Host offering: yourkmsservername.yourchild.yourrootdomain.internal. << you want to terminate the FQDN with a period especially if you're servicing multiple domains.

In my case my KMS records all point back to a KMS server in the child domain of the forest.
0
 

Author Comment

by:sanjayambre
ID: 39671640
Checked & SRV settings are correct. we tried to update license on affected machines by running command "slmgr.vbs /ato" but geeting error.

Error is attached for the reference.
KMS-Error.jpg
0
 
LVL 17

Accepted Solution

by:
Learnctx earned 275 total points
ID: 39671888
It looks like you have not activated enough clients with theKMS. Try running the following command:

Slmgr.vbs /dli

If the count is not higher than 5 you need to activate more hosts.

If the count is higher than 5, then try re-arming your end points, restarting them and then reactivating them.

Step 1: Re-arm by using command "slmgr.vbs -rearm"
Step 2: Reboot
Step 3: Activate "slmgr.vbs -ato"

If the count is higher than 5 make sure to check the key management service event log in eventvwr for any errors.

If you have Office bundled there is a good blog post here from Microsoft if you have not correctly sysprep'd the machines.

https://blogs.technet.com/b/odsupport/archive/2010/06/14/troubleshooting.aspx.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
Resolve DNS query failed errors for Exchange
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now