Multiple KMS Hosts - Windows 2008 R2
I recently set up a KMS 2008 R2 Host with the help of a previous post. When I look at my DNS I see multiple entries for KMS host. Apparently someone enabled it on all my Domain Controllers. When I run cscript slmgr.vbs /dlv on them to see if there have been activations I do not see any. It is one domain with different sites DCs at those sites. I do not need all those KMS hosts unless they are activating clients on their respective subnets. Is that that case? How do I force clients to use KMS activation?
ASKER
Thanks for the info.
I have roughly 2000 clients spread across multiple sites with DCs at those sites. Is one KMS host sufficient or is having a second one advisable in the event the primary is unavailable?
I have roughly 2000 clients spread across multiple sites with DCs at those sites. Is one KMS host sufficient or is having a second one advisable in the event the primary is unavailable?
It is a trade off between how important is the licensing of your OS/Softwares at one specific time. When one machine is activated using a KMS, it remains active for 180 days and renewals are made constantly.
Scenario 1: Your KMS is out of service but your machines have been previously activated: In this case they will continue working normally, later you can repair your KMS or even just install a new one and eventually these machines will renew their license again. You have a long time to do it.
Scenario 2: Your KMS is out of service and you have a machine with a software that has just been installed, there fore it is not activated. In the case of office you will have an ugly red message each time that you open the software, and you will be able to use it for up to 30 days in that mode. In the case of Windows, it is going to show that it has not been activated, a watermark will appear with that message and some settings and updates are not going to be able to be applied until you get your KMS server.
For many companies it is not a big deal, and they just stay with one KMS server. For others it is something more important. If this is your case as far as you want to have the service available for 2,000 machines, you can install a second KMS server and if one is not available your machines will use the remaining server.
Scenario 1: Your KMS is out of service but your machines have been previously activated: In this case they will continue working normally, later you can repair your KMS or even just install a new one and eventually these machines will renew their license again. You have a long time to do it.
Scenario 2: Your KMS is out of service and you have a machine with a software that has just been installed, there fore it is not activated. In the case of office you will have an ugly red message each time that you open the software, and you will be able to use it for up to 30 days in that mode. In the case of Windows, it is going to show that it has not been activated, a watermark will appear with that message and some settings and updates are not going to be able to be applied until you get your KMS server.
For many companies it is not a big deal, and they just stay with one KMS server. For others it is something more important. If this is your case as far as you want to have the service available for 2,000 machines, you can install a second KMS server and if one is not available your machines will use the remaining server.
ASKER
Thanks for the info. It seems that having 7 kms hosts in my environment is a waste especially since they do not seem to be working properly. What is the recommended way to remove them?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Excellent. Thanks for all the help.
ASKER
I am searching for the KMS binary files in server manager but I do not see them under Remove Windows and features in windows 2008 R2
Ok, sorry, that is WS2008, it is in 2012 that it is as a feature. Just check if there is any component of Windows Activation in the list of programs installed in your WS2008 System, if not it is Ok. It is just that there are softwares that can be installed depending the products that the KMS is servicing for.
ASKER
Aaah. Got it thanks.
ASKER
One last thing. How do I get clients to activate against KMS?
By default, clients look into their domain for that specific DNS record.
For example, one computer joined in the domain contoso.com will try to read by default the DNS service record: _VLMCS._tcp.contoso.com. It should work automatically because it is the windows default, and it will achieve that if a new computer is installed tomorrow it will just activate automatically.
If you want to manually point to the KMS server (not automatically), for example the kms server called server1.contoso.com you can execute:
slmgr /skms server1.contoso.com
In order to activate windows using the KMS and not waiting the default cycle, (manual or automatic configuration)
slmgr /ato
For example, one computer joined in the domain contoso.com will try to read by default the DNS service record: _VLMCS._tcp.contoso.com. It should work automatically because it is the windows default, and it will achieve that if a new computer is installed tomorrow it will just activate automatically.
If you want to manually point to the KMS server (not automatically), for example the kms server called server1.contoso.com you can execute:
slmgr /skms server1.contoso.com
In order to activate windows using the KMS and not waiting the default cycle, (manual or automatic configuration)
slmgr /ato
ASKER
Great. Thanks for your help and patience. Much appreciated.
Generally speaking you need to delete the non-present or non-necessary DNS records. In order to locate these records follow this process:
1. Go to your DNSDomainZone using DNS Manager. Expand '_tcp' and locate there any service records with the name '_VLMCS'
2. Review the servers that are there with the value '_VLMCS', if there is a non-desired server in that list. Using that information connect to that server and remove/disable the KMS service function.
3. If your desired KMS server is listed with the name '_VLMCS', then it will be ok and your clients will use it. If not you can add it there manually or you can configure your KMS server to publish itself in your DNS.