?
Solved

Removing a KMS Server

Posted on 2014-03-20
3
Medium Priority
?
671 Views
Last Modified: 2014-03-21
Good Afternoon,

We’ve just noticed that we have 2 KMS servers on our network.

ServerKMS - Windows Server 2008 R2 Enterprise SP1
DC01 - Windows Server 2008 R2 Datacenter SP1

One we set up the other day “ServerKMS” and another one on our primary DC “DC01”, which looks like it was installed a few years ago.

C:\Users\XXXXX>nslookup -q=srv _vlmcs._tcp.domain.com
Server:  DC01.domain.com
Address:  123.456.78.9

_vlmcs._tcp.domain.com       SRV service location:
          priority       = 0
          weight         = 0
          port           = 1688
          svr hostname   = ServerKMS.domain.com
_vlmcs._tcp.domain.com       SRV service location:
          priority       = 0
          weight         = 0
          port           = 1688
          svr hostname   = DC01.domain.com
ServerKMS.domain.com    internet address = 987.654.32.1
ServerKMS.domain.com    AAAA IPv6 address = 2014:abcd:efgh::ijkl:mnop
DC01.domain.com      internet address = 123.456.78.9

We want all of our workstations and servers to only look for “ServerKMS” for the Microsoft licensing and not “DC01”.

I found this article which explains just how to do this:
http://www.rivnet.ro/2013/02/how-to-remove-a-kms-server-from-your-infrastructure.html

But this article involves changing the key as well as a few other things. Since DC01 is our primary DC, we want to do as little as possible with interfering with the key it’s using.

So I am wondering, if we were just to remove the “_VLMCS” record from the DNS server (highlighted below), would this be OK?

dns
Is it OK to leave DC01 with a KMS key instead of a MAK key?

We only want to use “ServerKMS” as our one and only KMS server.

Kindly advise.

Regards,
N
0
Comment
Question by:Kevin
  • 2
3 Comments
 
LVL 18

Accepted Solution

by:
Chris earned 2000 total points
ID: 39944698
yeap if you remove the additional service record then no workstation/server will autodiscover the service.

you might be left with servers still registered to the KMS server which could still be activating from it

having read through the article it wont have any effect on the DC other than stopping the KMS service which will sort servers trying to activate it
0
 
LVL 1

Author Comment

by:Kevin
ID: 39945244
Thank you for your reply.

One more question for you. If we were to change the key of DC01 from a KMS key to a MAK key, would there be any problems with the functionality of the DC?

We know already that we would lose the KMS functionality, but again we want this to be removed anyway. But what about anything else? Would replaceing the key to a MAK be a simple switch and not cause any undesirable affects?

Kindly advise.

Regards,
N
0
 
LVL 1

Author Closing Comment

by:Kevin
ID: 39945525
Nevermind I found my answer.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
In this article, we will discuss how you can secure Active Directory using free tools, and how you can choose a safe and secure Active Directory security auditing tool.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

589 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question