Win7 Pilot Notes –KMS is UP

I have managed to study, design & implement KMS Hosts for Bank of YAK within a few days, and now in testing phase, and convert MAK client to KMS slowly.


  • The bank has 3 Data Centers in 3 countries, with around 15K Windows PCs & Servers.
  • 2 MS 2003 AD forests cross 3 DCs
  • Currently, MAK is used to activate VLK for windows 2008 via phone, and win7 & Office 2010 via online.
KMS concepts

Have spent some times to understand some KMS concepts:

  • KMS Host & KMS client – KMS Host is to host KMS service for KMS clients
  • KMS Host Key and KMS Client Key
    • KMS Host Key is an activation key bought from Microsoft to activate KMS Host through Microsoft. And different product has its own KMS Host Keys
    • KMS Client Key is a common key from Microsoft, and used to convert MAK client to KMS client. Different product has its own KMS client key.
Principle Design
  • 2 KMS Hosts in each DC for local HA, total 6 KMS Hosts. Host1 is the primary, and Host2 is the backup
  • all KMS hosts are running in the OA MS2003 DCs ( will monitor the perf and move to root DC in future. Microsoft IT run KMS host on its root DC). KMS 1.2 is used
  • Country based DNS zone (yak.local) is used for clients to contact the KMS host locally instead of WAN
  • Disable KMS auto publish in its domain
  • manually create SRVs in all AD Domains DNS zone for KMS auto discovery, including another forest
  • Host2 has a higher DNS priority in SRV record compared with Host1
KMS tools
  • C:\windows\system32\slmgr.vbs is used to manage KMS service and Windows KMS client
  • C:\programFiles\….\Office14\ospp.vbs is used to manage Office 2010 KMS client
  • VAMT 2.0 is easy to use and convert MAK to KMS
Lesson Learn
  1. No way to activate KMS v1.2 for W2K3 Host via phone because no slui.exe in W2K3. Have to add my ID with internet access into the Domain Admins for online activation, Security!
  2. No issue to activate all KMS v1.2 hosts running on W2K3 2003 SP2 (32-bit), but encounter “invalid key” problem on KMS 1.2 running on W2K3 R2 (64-bit), no clue yet!
  3. rearming Office 2010 and win7 b4 sysprep is a must ???
  4. workaround to meet the KMS activation Threshold (win7:25, w2k8:5, Office:5) is to just keep one Host live, disable all others temp, then manually activate the KMS clients again & again via the only ONE host via VAMT
KMS Client Keys

These keys are only needed if you are using slmgr or ospp. If using VAMT, just ignore them since they look in VAMT

Operating System Edition Product Key
Windows 7
Windows 7 Professional FJ82H-XT6CR-J8D7P-XQJJ2-GPDD4
Windows 7 Professional N MRPKT-YTG23-K7D7T-X2JMM-QY7MG
Windows 7 Enterprise 33PXH-7Y6KF-2VJC9-XBBR8-HVTHH
Windows 7 Enterprise N YDRBP-3D83W-TY26F-D46B2-XCKRJ
Windows 7 Enterprise E C29WB-22CC8-VJ326-GHFJW-H9DH4
Windows Server 2008 R2
Windows 2008 R2 HPC Edition FKJQ8-TMCVP-FRMR7-4WR42-3JCD7
Windows 2008 R2 R2 Datacenter 74YFP-3QFB3-KQT8W-PMXWJ-7M648
Windows 2008 R2 R2 Enterprise 489J6-VHDMP-X63PK-3K798-CPX3Y
Windows 2008 R2 for Itanium-Based Systems GT63C-RJFQ3-4GMB6-BRFB9-CB83V
Windows 2008 R2 Standard YC6KT-GKW9T-YTKYR-T4X34-R7VHC
Windows Web Server 2008 R2 6TPJF-RBVHG-WBW2R-86QPH-6RTM4
Office 2010 Suites
Office Home and Business 2010 D6QFG-VBYP2-XQHM7-J97RH-VVRCK
Office Standard 2010  V7QKV-4XVVR-XYV4D-F7DFM-8R6BM 
Office Professional Plus 2010 VYBBJ-TRJPB-QFQRF-QFT4D-H3GVB 
Office 2010 Stand-alone
Access 2010  V7Y44-9T38C-R2VJK-666HK-T7DDX 
Excel 2010  H62QG-HXVKF-PP4HP-66KMR-CW9BM 
SharePoint Workspace 2010  QYYW6-QP4CB-MBV6G-HYMCJ-4T3J4 
InfoPath 2010  K96W8-67RPQ-62T9Y-J8FQJ-BT37T
OneNote 2010  Q4Y4M-RHWJM-PY37F-MTKWH-D3XHX 
Outlook 2010  7YDC2-CWM8M-RRTJC-8MDVC-X3DWQ 
PowerPoint 2010  RC8FX-88JRY-3PF7C-X8P67-P4VTT 
Project Professional 2010  YGX6F-PGV49-PGW3J-9BTGG-VHKC6 
Project Standard 2010  4HP3K-88W3F-W2K3D-6677X-F9PGB
Publisher 2010  BFK7F-9MYHM-V68C7-DRQ66-83YTP 
Word 2010  HVHB3-C6FV7-KQX9W-YQG79-CRY7T 
Visio 2010
Visio Premium 2010  D9DWC-HPYVV-JGF4P-BTWQB-WX8BJ 
Visio Professional 2010  7MCW8-VRQVK-G677T-PDJCM-Q8TCP 
Visio Standard 2010  767HD-QGMWX-8QTDB-9G3R2-KHFGJ
This entry was posted in SCCM 2007, Windows 7. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s