Solved

Removing a KMS Server

Posted on 2014-03-20
3
573 Views
Last Modified: 2014-03-21
Good Afternoon,

We’ve just noticed that we have 2 KMS servers on our network.

ServerKMS - Windows Server 2008 R2 Enterprise SP1
DC01 - Windows Server 2008 R2 Datacenter SP1

One we set up the other day “ServerKMS” and another one on our primary DC “DC01”, which looks like it was installed a few years ago.

C:\Users\XXXXX>nslookup -q=srv _vlmcs._tcp.domain.com
Server:  DC01.domain.com
Address:  123.456.78.9

_vlmcs._tcp.domain.com       SRV service location:
          priority       = 0
          weight         = 0
          port           = 1688
          svr hostname   = ServerKMS.domain.com
_vlmcs._tcp.domain.com       SRV service location:
          priority       = 0
          weight         = 0
          port           = 1688
          svr hostname   = DC01.domain.com
ServerKMS.domain.com    internet address = 987.654.32.1
ServerKMS.domain.com    AAAA IPv6 address = 2014:abcd:efgh::ijkl:mnop
DC01.domain.com      internet address = 123.456.78.9

We want all of our workstations and servers to only look for “ServerKMS” for the Microsoft licensing and not “DC01”.

I found this article which explains just how to do this:
http://www.rivnet.ro/2013/02/how-to-remove-a-kms-server-from-your-infrastructure.html

But this article involves changing the key as well as a few other things. Since DC01 is our primary DC, we want to do as little as possible with interfering with the key it’s using.

So I am wondering, if we were just to remove the “_VLMCS” record from the DNS server (highlighted below), would this be OK?

dns
Is it OK to leave DC01 with a KMS key instead of a MAK key?

We only want to use “ServerKMS” as our one and only KMS server.

Kindly advise.

Regards,
N
0
Comment
Question by:nobushi
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 18

Accepted Solution

by:
irweazelwallis earned 500 total points
ID: 39944698
yeap if you remove the additional service record then no workstation/server will autodiscover the service.

you might be left with servers still registered to the KMS server which could still be activating from it

having read through the article it wont have any effect on the DC other than stopping the KMS service which will sort servers trying to activate it
0
 
LVL 1

Author Comment

by:nobushi
ID: 39945244
Thank you for your reply.

One more question for you. If we were to change the key of DC01 from a KMS key to a MAK key, would there be any problems with the functionality of the DC?

We know already that we would lose the KMS functionality, but again we want this to be removed anyway. But what about anything else? Would replaceing the key to a MAK be a simple switch and not cause any undesirable affects?

Kindly advise.

Regards,
N
0
 
LVL 1

Author Closing Comment

by:nobushi
ID: 39945525
Nevermind I found my answer.
0

Featured Post

[Live Webinar] The Cloud Skills Gap

As Cloud technologies come of age, business leaders grapple with the impact it has on their team's skills and the gap associated with the use of a cloud platform.

Join experts from 451 Research and Concerto Cloud Services on July 27th where we will examine fact and fiction.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Suggested Courses

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question