Win2K8 Activation with KMS

Discussion in 'Windows Server' started by Joe, Jul 28, 2009.

  1. Joe

    Joe Guest

    I have just installed my first two Win2K8 servers in my Win2K3 network. I
    activated both servers using my volume license keys, similar to what I would
    do with Win2K3, and assumed everything was OK. However, now I'm seeing the
    following error:

    Publishing the Key Management Service (KMS) to DNS in the 'domain.com'
    domain failed. Info: hr=0x80072338.

    The interesting thing is that this error is only showing up on one of the
    Win2K8 servers. I do not have KMS installed on the network. I was going to
    install the KSM service on my domain controller, but the requirements state
    that I need 5 servers before KMS will work. Am I missing something? Will my
    one server stop working soon because it doesn't think its activated? Will I
    accomplish anything by installing KMS on the network if I don't have 5
    machines? The license type for both Win2K8 servers are KMS B licenses.

    Thanks,
    Joe
     
    Joe, Jul 28, 2009
    #1
    1. Advertisements

  2. Hello Joe,
    You do have KMS running on your network, I am guessing you used your KMS
    key to activate those machines and they are now trying to register with
    your DNS server.
    Open and elevated CMD prompt and run slmgr /dlv and report back the output.

    The error is not causing any issues, it simply cannot reigster itself so
    KMS clients cannot use DNS to locate it. Once you get to the 5 more
    servers then it may become more important
    Thanks,
    Darrell Gorter[MSFT]

    This posting is provided "AS IS" with no warranties, and confers no rights
    --------------------
    | >Thread-Topic: Win2K8 Activation with KMS
    | >thread-index: AcoPqraem6k/tpxYRU+X4znTv85Zpg==
    | >X-WBNR-Posting-Host: 12.145.167.134
    | >From: =?Utf-8?B?Sm9l?= <>
    | >Subject: Win2K8 Activation with KMS
    | >Date: Tue, 28 Jul 2009 10:42:01 -0700
    | >Lines: 18
    | >Message-ID: <>
    | >MIME-Version: 1.0
    | >Content-Type: text/plain;
    | > charset="Utf-8"
    | >Content-Transfer-Encoding: 7bit
    | >X-Newsreader: Microsoft CDO for Windows 2000
    | >Content-Class: urn:content-classes:message
    | >Importance: normal
    | >Priority: normal
    | >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.3168
    | >Newsgroups: microsoft.public.windows.server.general
    | >Path: TK2MSFTNGHUB02.phx.gbl
    | >Xref: TK2MSFTNGHUB02.phx.gbl
    microsoft.public.windows.server.general:59458
    | >NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
    | >X-Tomcat-NG: microsoft.public.windows.server.general
    | >
    | >I have just installed my first two Win2K8 servers in my Win2K3 network.
    I
    | >activated both servers using my volume license keys, similar to what I
    would
    | >do with Win2K3, and assumed everything was OK. However, now I'm seeing
    the
    | >following error:
    | >
    | >Publishing the Key Management Service (KMS) to DNS in the 'domain.com'
    | >domain failed. Info: hr=0x80072338.
    | >
    | >The interesting thing is that this error is only showing up on one of
    the
    | >Win2K8 servers. I do not have KMS installed on the network. I was
    going to
    | >install the KSM service on my domain controller, but the requirements
    state
    | >that I need 5 servers before KMS will work. Am I missing something?
    Will my
    | >one server stop working soon because it doesn't think its activated?
    Will I
    | >accomplish anything by installing KMS on the network if I don't have 5
    | >machines? The license type for both Win2K8 servers are KMS B licenses.
    | >
    | >Thanks,
    | >Joe
    | >
     
    Darrell Gorter[MSFT], Jul 28, 2009
    #2
    1. Advertisements

  3. Joe

    Joe Guest

    Darrell,
    Thanks for the reply. I ran slmgr as requested and it shows that KMS IS
    installed on this server. (Although it does not show up as an installed
    program, role, or feature.) It also shows that the license status is
    "licensed" using a "Volume_KMS_B Channel" license. (Unfortunately I can't
    copy/paste the content of the window, and I couldn't find a log entry with
    the slmgr results either.)

    DNS publishing is enabled, so I guess I need to dig into why it is unable to
    register itself in DNS. I have AD-enabled DNS servers configured on two
    domain controllers that should allow dynamic updates. Any thoughts on why
    this error occurs?

    Thanks again,
    Joe

     
    Joe, Jul 29, 2009
    #3
  4. Hello Joe,
    let's start with this link
    http://technet.microsoft.com/en-us/library/cc303280.aspx
    Have you done this portion?

    Configure DNS for KMS Activation
    KMS hosts automatically publish their existence by creating service (SRV)
    resource records in the DNS server. If you have only one KMS host and DDNS,
    no action is required for the KMS host to create the SRV record that
    publishes the KMS service. However, if you have more than one KMS host,
    only the first KMS host can create an SRV record. Subsequent KMS hosts
    cannot change or update SRV records unless the default permissions on the
    DNS server are changed.

    Change the Default SRV Permissions
    To complete this procedure you must have administrative rights in the
    domain and the KMS hosts must all belong to the same Active Directory®
    domain.

    To change the default SRV permissions on a Microsoft DNS server

    1. Create a global security group in Active Directory for your KMS
    hosts.

    2. Add each of your KMS hosts to the new security group.

    3. Set the permissions on the DNS server to allow updates by members
    of the KMS host security group.


    Thanks,
    Darrell Gorter[MSFT]

    This posting is provided "AS IS" with no warranties, and confers no rights
    --------------------
    | >Thread-Topic: Win2K8 Activation with KMS
    | >thread-index: AcoQUEHBvVXInYCsRVSbxgC27xQPzg==
    | >X-WBNR-Posting-Host: 12.145.167.134
    | >From: =?Utf-8?B?Sm9l?= <>
    | >References: <>
    <>
    | >Subject: RE: Win2K8 Activation with KMS
    | >Date: Wed, 29 Jul 2009 06:27:02 -0700
    | >Lines: 85
    | >Message-ID: <>
    | >MIME-Version: 1.0
    | >Content-Type: text/plain;
    | > charset="Utf-8"
    | >Content-Transfer-Encoding: 7bit
    | >X-Newsreader: Microsoft CDO for Windows 2000
    | >Content-Class: urn:content-classes:message
    | >Importance: normal
    | >Priority: normal
    | >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4325
    | >Newsgroups: microsoft.public.windows.server.general
    | >Path: TK2MSFTNGHUB02.phx.gbl
    | >Xref: TK2MSFTNGHUB02.phx.gbl
    microsoft.public.windows.server.general:59481
    | >NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
    | >X-Tomcat-NG: microsoft.public.windows.server.general
    | >
    | >Darrell,
    | >Thanks for the reply. I ran slmgr as requested and it shows that KMS IS
    | >installed on this server. (Although it does not show up as an installed
    | >program, role, or feature.) It also shows that the license status is
    | >"licensed" using a "Volume_KMS_B Channel" license. (Unfortunately I
    can't
    | >copy/paste the content of the window, and I couldn't find a log entry
    with
    | >the slmgr results either.)
    | >
    | >DNS publishing is enabled, so I guess I need to dig into why it is
    unable to
    | >register itself in DNS. I have AD-enabled DNS servers configured on two
    | >domain controllers that should allow dynamic updates. Any thoughts on
    why
    | >this error occurs?
    | >
    | >Thanks again,
    | >Joe
    | >
    | >""Darrell Gorter[MSFT]"" wrote:
    | >
    | >> Hello Joe,
    | >> You do have KMS running on your network, I am guessing you used your
    KMS
    | >> key to activate those machines and they are now trying to register
    with
    | >> your DNS server.
    | >> Open and elevated CMD prompt and run slmgr /dlv and report back the
    output.
    | >>
    | >> The error is not causing any issues, it simply cannot reigster itself
    so
    | >> KMS clients cannot use DNS to locate it. Once you get to the 5 more
    | >> servers then it may become more important
    | >> Thanks,
    | >> Darrell Gorter[MSFT]
    | >>
    | >> This posting is provided "AS IS" with no warranties, and confers no
    rights
    | >> --------------------
    | >> | >Thread-Topic: Win2K8 Activation with KMS
    | >> | >thread-index: AcoPqraem6k/tpxYRU+X4znTv85Zpg==
    | >> | >X-WBNR-Posting-Host: 12.145.167.134
    | >> | >From: =?Utf-8?B?Sm9l?= <>
    | >> | >Subject: Win2K8 Activation with KMS
    | >> | >Date: Tue, 28 Jul 2009 10:42:01 -0700
    | >> | >Lines: 18
    | >> | >Message-ID: <>
    | >> | >MIME-Version: 1.0
    | >> | >Content-Type: text/plain;
    | >> | > charset="Utf-8"
    | >> | >Content-Transfer-Encoding: 7bit
    | >> | >X-Newsreader: Microsoft CDO for Windows 2000
    | >> | >Content-Class: urn:content-classes:message
    | >> | >Importance: normal
    | >> | >Priority: normal
    | >> | >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.3168
    | >> | >Newsgroups: microsoft.public.windows.server.general
    | >> | >Path: TK2MSFTNGHUB02.phx.gbl
    | >> | >Xref: TK2MSFTNGHUB02.phx.gbl
    | >> microsoft.public.windows.server.general:59458
    | >> | >NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
    | >> | >X-Tomcat-NG: microsoft.public.windows.server.general
    | >> | >
    | >> | >I have just installed my first two Win2K8 servers in my Win2K3
    network.
    | >> I
    | >> | >activated both servers using my volume license keys, similar to
    what I
    | >> would
    | >> | >do with Win2K3, and assumed everything was OK. However, now I'm
    seeing
    | >> the
    | >> | >following error:
    | >> | >
    | >> | >Publishing the Key Management Service (KMS) to DNS in the
    'domain.com'
    | >> | >domain failed. Info: hr=0x80072338.
    | >> | >
    | >> | >The interesting thing is that this error is only showing up on one
    of
    | >> the
    | >> | >Win2K8 servers. I do not have KMS installed on the network. I was
    | >> going to
    | >> | >install the KSM service on my domain controller, but the
    requirements
    | >> state
    | >> | >that I need 5 servers before KMS will work. Am I missing
    something?
    | >> Will my
    | >> | >one server stop working soon because it doesn't think its
    activated?
    | >> Will I
    | >> | >accomplish anything by installing KMS on the network if I don't
    have 5
    | >> | >machines? The license type for both Win2K8 servers are KMS B
    licenses.
    | >> | >
    | >> | >Thanks,
    | >> | >Joe
    | >> | >
    | >>
    | >>
    | >
     
    Darrell Gorter[MSFT], Jul 29, 2009
    #4
  5. Joe

    Joe Guest

    Darrell,
    Thanks much. That does help explain things. I created the security group
    added permissions to the DNS zone in question. I 'think' I did it correctly.
    There is no explicit permission for "allow updates", so I set the 'read',
    'write', and 'create all child objects' permissions. If you think I missed
    something there please let me know.

    Thanks again.
    Joe

     
    Joe, Jul 30, 2009
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.