Solved

Removing a KMS Server

Posted on 2014-03-20
3
541 Views
Last Modified: 2014-03-21
Good Afternoon,

We’ve just noticed that we have 2 KMS servers on our network.

ServerKMS - Windows Server 2008 R2 Enterprise SP1
DC01 - Windows Server 2008 R2 Datacenter SP1

One we set up the other day “ServerKMS” and another one on our primary DC “DC01”, which looks like it was installed a few years ago.

C:\Users\XXXXX>nslookup -q=srv _vlmcs._tcp.domain.com
Server:  DC01.domain.com
Address:  123.456.78.9

_vlmcs._tcp.domain.com       SRV service location:
          priority       = 0
          weight         = 0
          port           = 1688
          svr hostname   = ServerKMS.domain.com
_vlmcs._tcp.domain.com       SRV service location:
          priority       = 0
          weight         = 0
          port           = 1688
          svr hostname   = DC01.domain.com
ServerKMS.domain.com    internet address = 987.654.32.1
ServerKMS.domain.com    AAAA IPv6 address = 2014:abcd:efgh::ijkl:mnop
DC01.domain.com      internet address = 123.456.78.9

We want all of our workstations and servers to only look for “ServerKMS” for the Microsoft licensing and not “DC01”.

I found this article which explains just how to do this:
http://www.rivnet.ro/2013/02/how-to-remove-a-kms-server-from-your-infrastructure.html

But this article involves changing the key as well as a few other things. Since DC01 is our primary DC, we want to do as little as possible with interfering with the key it’s using.

So I am wondering, if we were just to remove the “_VLMCS” record from the DNS server (highlighted below), would this be OK?

dns
Is it OK to leave DC01 with a KMS key instead of a MAK key?

We only want to use “ServerKMS” as our one and only KMS server.

Kindly advise.

Regards,
N
0
Comment
Question by:nobushi
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 18

Accepted Solution

by:
irweazelwallis earned 500 total points
ID: 39944698
yeap if you remove the additional service record then no workstation/server will autodiscover the service.

you might be left with servers still registered to the KMS server which could still be activating from it

having read through the article it wont have any effect on the DC other than stopping the KMS service which will sort servers trying to activate it
0
 
LVL 1

Author Comment

by:nobushi
ID: 39945244
Thank you for your reply.

One more question for you. If we were to change the key of DC01 from a KMS key to a MAK key, would there be any problems with the functionality of the DC?

We know already that we would lose the KMS functionality, but again we want this to be removed anyway. But what about anything else? Would replaceing the key to a MAK be a simple switch and not cause any undesirable affects?

Kindly advise.

Regards,
N
0
 
LVL 1

Author Closing Comment

by:nobushi
ID: 39945525
Nevermind I found my answer.
0

Featured Post

Backup Solution for AWS

Read about how CloudBerry Backup fully integrates your backups with Amazon S3 and Amazon Glacier to provide military-grade encryption and dramatically cut storage costs on any platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question