Solved

Removing a KMS Server

Posted on 2014-03-20
3
520 Views
Last Modified: 2014-03-21
Good Afternoon,

We’ve just noticed that we have 2 KMS servers on our network.

ServerKMS - Windows Server 2008 R2 Enterprise SP1
DC01 - Windows Server 2008 R2 Datacenter SP1

One we set up the other day “ServerKMS” and another one on our primary DC “DC01”, which looks like it was installed a few years ago.

C:\Users\XXXXX>nslookup -q=srv _vlmcs._tcp.domain.com
Server:  DC01.domain.com
Address:  123.456.78.9

_vlmcs._tcp.domain.com       SRV service location:
          priority       = 0
          weight         = 0
          port           = 1688
          svr hostname   = ServerKMS.domain.com
_vlmcs._tcp.domain.com       SRV service location:
          priority       = 0
          weight         = 0
          port           = 1688
          svr hostname   = DC01.domain.com
ServerKMS.domain.com    internet address = 987.654.32.1
ServerKMS.domain.com    AAAA IPv6 address = 2014:abcd:efgh::ijkl:mnop
DC01.domain.com      internet address = 123.456.78.9

We want all of our workstations and servers to only look for “ServerKMS” for the Microsoft licensing and not “DC01”.

I found this article which explains just how to do this:
http://www.rivnet.ro/2013/02/how-to-remove-a-kms-server-from-your-infrastructure.html

But this article involves changing the key as well as a few other things. Since DC01 is our primary DC, we want to do as little as possible with interfering with the key it’s using.

So I am wondering, if we were just to remove the “_VLMCS” record from the DNS server (highlighted below), would this be OK?

dns
Is it OK to leave DC01 with a KMS key instead of a MAK key?

We only want to use “ServerKMS” as our one and only KMS server.

Kindly advise.

Regards,
N
0
Comment
Question by:nobushi
  • 2
3 Comments
 
LVL 18

Accepted Solution

by:
irweazelwallis earned 500 total points
ID: 39944698
yeap if you remove the additional service record then no workstation/server will autodiscover the service.

you might be left with servers still registered to the KMS server which could still be activating from it

having read through the article it wont have any effect on the DC other than stopping the KMS service which will sort servers trying to activate it
0
 
LVL 1

Author Comment

by:nobushi
ID: 39945244
Thank you for your reply.

One more question for you. If we were to change the key of DC01 from a KMS key to a MAK key, would there be any problems with the functionality of the DC?

We know already that we would lose the KMS functionality, but again we want this to be removed anyway. But what about anything else? Would replaceing the key to a MAK be a simple switch and not cause any undesirable affects?

Kindly advise.

Regards,
N
0
 
LVL 1

Author Closing Comment

by:nobushi
ID: 39945525
Nevermind I found my answer.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question