Solved

Removing a KMS Server

Posted on 2014-03-20
3
513 Views
Last Modified: 2014-03-21
Good Afternoon,

We’ve just noticed that we have 2 KMS servers on our network.

ServerKMS - Windows Server 2008 R2 Enterprise SP1
DC01 - Windows Server 2008 R2 Datacenter SP1

One we set up the other day “ServerKMS” and another one on our primary DC “DC01”, which looks like it was installed a few years ago.

C:\Users\XXXXX>nslookup -q=srv _vlmcs._tcp.domain.com
Server:  DC01.domain.com
Address:  123.456.78.9

_vlmcs._tcp.domain.com       SRV service location:
          priority       = 0
          weight         = 0
          port           = 1688
          svr hostname   = ServerKMS.domain.com
_vlmcs._tcp.domain.com       SRV service location:
          priority       = 0
          weight         = 0
          port           = 1688
          svr hostname   = DC01.domain.com
ServerKMS.domain.com    internet address = 987.654.32.1
ServerKMS.domain.com    AAAA IPv6 address = 2014:abcd:efgh::ijkl:mnop
DC01.domain.com      internet address = 123.456.78.9

We want all of our workstations and servers to only look for “ServerKMS” for the Microsoft licensing and not “DC01”.

I found this article which explains just how to do this:
http://www.rivnet.ro/2013/02/how-to-remove-a-kms-server-from-your-infrastructure.html

But this article involves changing the key as well as a few other things. Since DC01 is our primary DC, we want to do as little as possible with interfering with the key it’s using.

So I am wondering, if we were just to remove the “_VLMCS” record from the DNS server (highlighted below), would this be OK?

dns
Is it OK to leave DC01 with a KMS key instead of a MAK key?

We only want to use “ServerKMS” as our one and only KMS server.

Kindly advise.

Regards,
N
0
Comment
Question by:nobushi
  • 2
3 Comments
 
LVL 18

Accepted Solution

by:
irweazelwallis earned 500 total points
ID: 39944698
yeap if you remove the additional service record then no workstation/server will autodiscover the service.

you might be left with servers still registered to the KMS server which could still be activating from it

having read through the article it wont have any effect on the DC other than stopping the KMS service which will sort servers trying to activate it
0
 
LVL 1

Author Comment

by:nobushi
ID: 39945244
Thank you for your reply.

One more question for you. If we were to change the key of DC01 from a KMS key to a MAK key, would there be any problems with the functionality of the DC?

We know already that we would lose the KMS functionality, but again we want this to be removed anyway. But what about anything else? Would replaceing the key to a MAK be a simple switch and not cause any undesirable affects?

Kindly advise.

Regards,
N
0
 
LVL 1

Author Closing Comment

by:nobushi
ID: 39945525
Nevermind I found my answer.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I have been working as System Administrators since 2003. I recently started working as a FreeLancer and was amazed to find out that very few people are taking full advantage of their Windows Server Machines. Microsoft Windows Server comes with so…
OfficeMate Freezes on login or does not load after login credentials are input.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now