Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Key Management Services

Posted on 2016-07-26
8
Medium Priority
?
78 Views
Last Modified: 2016-08-03
I would like to add a KMS role and service to my windows 2008 R2 server. Looking for the process.
0
Comment
Question by:InSearchOf
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
8 Comments
 
LVL 83

Accepted Solution

by:
David Johnson, CD, MVP earned 2000 total points
ID: 41730778
so you are going to set up a microsoft volume licensing agreement. and you have at least 5 servers or 25 client machines or 5 office machines?

The office KMS server can be any server or client product. KMS uses port 1688 so it must be open
here is a walkthrough for server 2012R2 http://woshub.com/kms-server-installation-on-windows-server-2012-r2/
Walkthrough Video for Server 2008R2 https://technet.microsoft.com/en-ca/windows/set-up-a-kms-host-on-a-windows-server-2008-r2-machine.aspx?f=255&MSPPError=-2147217396
0
 

Author Comment

by:InSearchOf
ID: 41731249
Thanks for the info. Can I add this to one of my existing Domain Controllers? Is there a best practice?
0
 
LVL 83

Expert Comment

by:David Johnson, CD, MVP
ID: 41732230
yes you can add it to a domain controller. Best practice is domain controllers should only be domain controllers but economics may dictate otherwise. It is a low impact item so you should be ok
0
Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

 

Author Comment

by:InSearchOf
ID: 41733995
Thanks for the info. One last question. Do I have to add a role to the server?
0
 
LVL 83

Expert Comment

by:David Johnson, CD, MVP
ID: 41734065
no just follow the 2nd video walkthrough
0
 

Author Comment

by:InSearchOf
ID: 41734772
OK Thanks much appreciated.

Danny
0
 

Author Comment

by:InSearchOf
ID: 41737990
I followed the steps in the video and was able to set up the KMS host. When I went into DNS to see if the srv record was created I see 5 or 6 different entries for _VLMCS pointing to different servers. What do I make of that?
0
 

Author Comment

by:InSearchOf
ID: 41738034
Also, now that I have setup a KMS host will I be able to validate office., win 7, and server?
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A hard and fast method for reducing Active Directory Administrators members.
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Suggested Courses

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question