Microsoft KMS Server
Vložit
- čas přidán 13. 03. 2019
- Overview of why you should be using a KMS server once you get 25 systems in your lab or network.
KMS Keys
docs.microsoft.com/en-us/wind...
Configuring KMS
docs.microsoft.com/en-us/depl...
Code repository
bitbucket.org/tomstechshow/
My photo site
www.thomasnelsonphotography.com
How to support my channel
1 - Like videos
2 - Subscribe to my channel
3 - www.tomstechshow.com/contribute
4 - follow me on / toms_tech_show
5 - Check out the Facebook page tomstechshow
Thanks nice simple explanation of KMS for everyone to understand .
I just saw your channel today, these are awesome information! We need more tutorials from you :) love your work, can you show how you install a KMS server and your best practice?
New subscriber here!!!
Really well explained, thanks!
Nice Video! I had a quick question. How many different KMS product keys can be added to one KMS server? I know our current KMS server has a key for Office products and I wanted to add a KMS host key to the KMS Server to activate Server 2019 Datacenter and below. I retrieved the KMS key from the volume licensing service center so I assume this is the key we install on the KMS server. If I add this key will it effect any previously installed Office KMS product keys?
In order to activate Microsoft Office you had to install the Microsoft Office Volume License Pack, this handles the Office KMS key, The windows server kms key is handled directly by the KMS service. So yup, the one server can do both Windows and Office. The "slmgr.vbs /dlv all" command will show all activation information.
Nice video. Worth mentioning that the microsoft vlsc now hides your organisations kms keys and you need to ring them to get them to appear in the portal. Also if you have a windows 10 kms key only your server must be windows 10 👍
Yes, whenever I have needed a KMS key for the server I have had to call Microsoft to have that put into our account. And you are also correct in that in order to Activate windows 10 you need a newer server version. And the newer Windows 10 builds like LTSC 2019 actually require Server 2019 to activate, Here is the link to the chart
docs.microsoft.com/en-us/windows-server/get-started-19/activation-19
@@TomsTechShow
I have question what is different between kms and hack tool auto kms
And dose auto kms dose any damage to a computer ?
Thank you so much for sharing this info. Very Helpful! Would you mind explaining what might be required or how to set up the KMS with internet access while the rest of the network computers DO NOT have internet access? We have DEV, TEST, and PRODUCTION domains. Dev and Test have internet access through firewall appliances. Prod has no internet access.
Once the KMS server is activated, you can then remove it from internet access, this only has to be activated once. Then place that server in the internal network to activate your locked down clients which must contact the KMS server every 30 to 90 days. If this is a virtual machine you can also have add network adapters to activate the dev and test systems. You will want it to be able to receive windows updates. Which can be done with Windows Update Server.
@@TomsTechShow Thanks again. Does the KMS have to be a Domain member computer? In other words, can the PROD KMS reside in a DMZ and "all computers" connect to it in the DMZ?
Long story made short...I wanted to use an Update Server but we have SCCM...a real pain with separate networks and domains. One of our networks/domains is not connected to the "corporate domain" for security reasons.
The KMS server does not need to be a domain member and can activate computers that' can connect to it, I have systems that activate over a Cisco AnyConnect VPN,. You will have to run a script on each client to perform the initial activation that includes these commands
slmgr.vbs /skms ad-kms-1.openmethods.com Your KMS server name
slmgr.vbs /ipk WC2BQ-8NRM3-FDDYY-2BFGV-KHKQY Key for the system you are acrivating
slmgr.vbs /ATO Activation command
This needs to be run at an elevated command prompt.
@@TomsTechShow I think I saw these commands in your video. Didn't make sense then. I've been reviewing a bunch of MS docs as well. They talk about TCP ports and RDP. Between those docs and your super helpful video I think I'm in the ball park...maybe on 2nd base. Thanks again so very much! I hope my "like" helps you.
so if i do this that way
my pc gonna be controlled or can the organization see what i do on my pc?
sorry if its obvious!!
Thank you Tom for this video! But a question is can these key management sites be safe? or install malware or keylogger/spyware?
KMS is a simple request and response, but the public KMS servers are not allowed by Microsoft and can be taken down at any time. Plus that site will have your public IP address and can start attacking your router.
You just create a virtual machine with virtual box which is free
Thanks for this great video!
Question here: what if you're on an air-gapped/standalone network with no Internet connectivity????
Then is KMS a no-go?
Right, in order to activate a non-internet connected PC you would need to perform activation with a MAK key and Proxy Activaion docs.microsoft.com/en-us/windows/deployment/volume-activation/proxy-activation-vamt
I think you are mistaken, Key Management Server is ideal for a standalone domain/network. MAK (multiple activation keys) use (1) Code/Key or (2)proxy server. I’ve been doing a lot of research on this last two days for work.
@@rossuser The KMS Server needs access to MIcrosoft and the Clients need access to the KMS server. So a system that has no network connection to either would have to be activated in an alternate way.
Tom's Tech Show! Not true, you can setup a offline kms server without MAC. Install the kms key and then activate it over the phone. The kms server does not require the internet for this.
Question: My organization is looking into having a Key Management Service (KMS) server in house from Microsoft in order to activate windows server 2019 and windows 10, do we still have to order for CALs from Microsoft after the windows server 2019 and windows 10 have been activated for 180 days and continuing?
Yes you will need Licenses for the systems that you will be activating.
Hi Tom thanks for this video. If you work for an organisation that has multiple subnets would you require multiple instances of KMS? That's assuming the subnets can communicate and some of these subnets are managed by other teams. I guess my second question is can you target specific subnets?
As long as the subnets are connected and routes setup, then the KMS server will be able to activate your clients.
dumb question but when you say the KMS server and the desktops/server have to be on the same network, does that mean that they have to be on the subnet? Or is it okay to have the KMS and the desktops/server on different subnets as long as they can communicate with each other?
As long as there is a network route and the server is reachable. It will work
Tom's Tech Show! Thanks for clearing that up
Hey Tom, We're in a bit of a unique situation where we have something working that we weren't expecting to work. I have a 2016 KMS server set up with 2016/2019 Standard KMS keys installed. We also have the Office package installed with 2016 keys. We have Windows 10 that we are trying to add so that those OS's are activated. Oddly enough, we cannot get the server to accept the Windows 10 keys, however our OS's are now activating. Do they activate under my server keys?
So once you get the KMS server activated, you only need to put the general KMS key onto the workstation. As long as you have at least 25 workstations activated they will activate. They Keys for the workstation can be found at Microsoft. docs.microsoft.com/en-us/windows-server/get-started/kmsclientkeys No special key is needed for the server other than the main KMS key you get from Microsoft.
@@TomsTechShow Perfect, thank you. I was thinking I needed to install each KMS key. We have well over the threshold for activation. We were just frustrated with not understanding why they were activating when it wouldn't accept the key.
So Just a word.. in using kms servers you will need at least the 25 machines that Tom talked about. Those 25 machines will always need to be on touching that server. if for some reason 1 or more of the 25 machines falls off the network for what ever reason the kms will NOT activate the machines on the network . so if possible keep at least 25 machines running the os you want to activate. or they will not activate. we had problems early on with machines getting used for something else and the kms stooped sending activation.
and if you are using it for Servers then you need to keep the number above 5.
have you done Microsoft office activation using KMS. If you could video of that it would be really helpful
In all my years I have never has the chance to setup Office with KMS, I will some research and see what I can come up with.
@@TomsTechShow thanks for quick reply. I am researching on how to do that for office but couldn't find any video. Your video was pretty close.
Hi if i use kms for ms office can they attack me?
Hey Tom, probably a silly question, if my company uses a KMS server to activate our computers, is there a way for me (end user) to use Microsoft Office Online features? We have Word 2016 and I am trying to utilize a Word web integration, but as I do not have a Microsoft account, I can't authenticate.
The reason I ask is Microsoft themselves say a MSA is required to install / activate Word 2013 and later. I'm guessing we'd need to change licenses but just wanted to double check.
Source: support.microsoft.com/en-us/office/what-account-to-use-with-office-and-you-need-one-914e6610-2763-47ac-ab36-602a81068235
So yeah, KMS can be used to activate Office, which is why in a business you can install without a Microsoft Account. You may be able to setup your business email account in Microsoft to use the web features. Check with your I.T. department. I have clients that sync active directory to the cloud so that the users can use the Domain account as a Microsoft account.
Back at it again maybe. Lol! Can the same LMS key be used on two different KMS servers? In the scenario I'm describing because firewalls and maybe "politics" we can't seem to connect with the corp KMS server. We are part of the corporation but on a completely separate physical network. It seems that the easiest solution would be to set up our own KMS. If I am describing this correctly we would be using the same KMS key twice.
Microsoft will only allow you to use the key for the server once. However, I have ours setup as a Virtual Machine and I was able to copy the VM, rename it and bring it up in a different location and it started handing out licenses.
I have question i don't know where is my kms host located but i only know the ip address can you help me?
This would depend on whether your KMS IP address is a private or public IP. If it begins with 192.168 or 10. or 172.16 then it is on a local network, If it is a public IP your can use a site like www.whatismyip.com/ip-whois-lookup/ to find who owns the IP endpoint.
Tell me how people use this to take Windows activation for free.
this really confuses me, whats the diference?
For example if activate my Windows with this key the only thing that i have to do is know who has the server, because if the "owner" shut it down your key are inactivated ???
So you have to purchase at least 5 server licenses or 25 desktop licenses from Microsoft, then you have to request from Microsoft a KMS key, That key is installed and activated with Microsoft. After that for all of the client desktops or servers you use the list of KMS client keys, that is where everyone uses the same key. You have to also tell your system where your KMS server is. For example kms.tomstechshow.com. Then your clients activate against that system. The client system must contact the KMS server every 90 day to stay activated. Legally there is no FREE way to do it. So the last part of the question, if you are using someone else’s KMS server and they shut it down then after 90 days you will be deactivated. You can REARM the system 3 times to get another 120 or so days, but then it will stop working after that.
I can shine some light on that, there are malicious articles out there claiming this is a free and legal way to activate Windows or Office and then point you to a specific kms server they operate. These aren't real kms servers but small programs on their side that always respond to the client with a license.
While it is correct this is a method to activate Windows 10 for free it is NOT a legal way to activate Windows. Neither are OEM keys or those cheap $10 retail keys as the latter are done trough creditcard fraud and OEM keys are only legal when used on the system they shipped with. They will never sell for less than $60.
The last thing people sometimes conflate is a kms activation tool. These tools are based on those fake activation servers or a token that makes the fake kms activation last until 2038. These are also not legal and not what we use in the corporate world.
So when you are setting up a license infrastructure for a company and you think KMS might be a good way to go always use the tools shown in this video and not projects of github or public kms servers.
can you provide kms batch file that you used in you computer? please?
Check the web page docs.microsoft.com/en-us/windows-server/get-started/kmsclientkeys for the list of keys.
Then the batch file is:
slmgr.vbs /skms ad-kms-1.openmethods.com
slmgr.vbs /ipk KMS-KEY-FROM-ABOVE-SITE
slmgr.vbs /ato
Is using a KMS from a random youtube video safe? like from those tutorials and such? is there a possibility of getting hacked?
So the servers in the CZcams videos and others that you find online are breaking Microsoft Terms of service and can disappear at any time, the activation is a simple challenge and response but they can track your router IP address and quickly find the model router you have and start sending attacks on your network. KMS activation is for businesses to maintain systems within their own closed network, not for any public use.
@@TomsTechShow how can you remove this? any tips?
@@ichirougillian7015 you need to just add a valid server to activate against. Or apply a windows license directly
@@TomsTechShow So if I remove the KMS based license am I safe? Like removing windows activation?
You can point to a valid KMS server or add a valid windows key.
is it safe to connect to a kms server? Can someone access my PC if I make that connection?
If you are talking a KMS server someone has put out in the public, be aware Microsoft can shut it down at any time. Currently there are no recent vulnerabilities that I have found. but that does not mean there are none out there. Best to get a licensed copy, you can extend the activation time by entering slmgr.vbs /rearm do that a few times will almost get you a year. Then just re-install windows again.
how do I remove the kms? i dont want my router to get attacked
This is what I have done before, but you will need an OEM or Retail Key to activate after this update:
To convert, do the following:
• Press Windows Key + R
• Type cmd in the run command line and press CTRL + SHIFT + ENTER to gain administrative access
• Type: slmgr.vbs -ipk and press enter
example: slmgr.vbs -ipk 12345ABCDE12345ABCD12345
• Then type: slmgr.vbs -ato
If you have no 25-digit Windows 10 Retail Key and the PC was purchased with pre-installed OEM license, you need to use the following Generic Key:
YTMG3-N6DKC-DKB77-7M9GH-8HVX7 - If your had had Home version even if you upgraded to Pro through Windows Store
VK7JG-NPHTM-C97JM-9MPGT-3V66T - If you had Pro. PC was purchased as Pro not upgraded from Home
BT79Q-G7N6G-PGBYW-4YWX6-6F4BT - If you had a Single Language edition
These Generic keys will just convert KMS to OEM but will not activate Windows. To activate, you need to go through the digital activation after the conversion by signing in with the Microsoft Account where your Digital Key is associated. To do that, go to Settings > Update & Security > Activation > Add an account
* Note: If the activation says "Windows is activated with a digital license lined to your Microsoft Account", no need to do anything.
I’m stuck in a bit of a pickle. I purchased a POS computer for my restaurant, from a reseller not my organization distributor. Didn’t realize the windows 10 mismatch IOT vs 10 enterprise LTSC would be an issue but apparently it was. Following a reimage, windows isn’t activated. I’m stuck with either buying grey market, running my own kms server, begging my institution for a kms key if they use one (idk), using a public kms server, or using a generator. It’s only one computer, and AFAIK the institution pays for windows keys regardless of if I purchase from the authorized distributor.
First, I would check with the institution if they have a window key available to use, I always keep some in reserve just for situations like this. Setting up a KMS server might not work because in order for the KMS server to be activated itself you would need at least 25 windows clients getting their activation from the server before it becomes valid. Lastly in order to get a legal LTSC windows key you need a volume license agreement with Microsoft, you institution may have that which leads me back to the start and that is to see if a spare key is available for this system. Last option is to just purchase Windows 10 Pro and install that on the system. This is where Microsoft kind of shoots themselves in the foot with the activation thing.
Is it safe to a KMS that I don't know who the owner is
I wanted to activate my windows 10 and I came across many videos that make me run the same commands that u ran but I did trust it cuz I saw a random link which is probably there KMS
The problem is KMS servers on the internet are run by unknown companies, often who sell you windows for cheap just to make a buck, there is no guarantee that these servers will be up for any extended time. and you need to have your windows connect to it every once in a while to validate the license.
@@TomsTechShow Does connecting to those servers have any risk
Like malware or something
While KMS is done through an anonymous remote procedure call. I can potentially expose your public IP address to them. These servers are also breaking MSFT licensing agreement and can be revoked at any time.
@@TomsTechShow MS does not suggest running a kms on a public network . if they do they will send a command to the server to shut down the kms (With a specific key) so i would not advise syncing it to a public network. also you have to have the right media for kms use Oem will not work as well as home pro. we have specific iso from technet that we use for making os builds.. also the machine has to touch the kms every 180 days or it will deactivate.
Thanks for the help 😊
4:30 is that a functional key? You don't need to cover that?
KMS keys for the client are all the same per each version of windows.
Sir can I use kms server? It's safe or caution? Plz... Kindly reply sir
KMS is a safe and preferred way to bulk activate computers on a corporate network.
@@TomsTechShow Thank you for answering sir..
@@TomsTechShow Can kms server owner spy on us...like if we've activated our systems using their server and are they able to check out our activities or not?
Using a public KMS server will expose your router IP address to that system. The server can also be taken down by Microsoft at any time. At this time I am not aware of any exploits currently. That does not mean that there are not attacks being developed and some may exist. And your computer has to contact this system every 90 days so you are constantly advertising your connection to the internet.
@@TomsTechShow Thank you for responding sir.
i just did the kms activation
and i am worried if is it safe for my pc or not and my conection can you just tell me is it safe form breaching
Please reply quickly
Make sure that your router firmware is up to date and you do not have RDP or any other ports forwarded into your network. Keep your A/V up to date. And know that the KMS server may go away and you will become non-activated.
@@TomsTechShow thanks there is not ports but there is in the router but these ports are from https is it ok and http too
Make sure that external or remote administration of the router is disabled. The best option is to obtain a regular key from Microsoft.
@@TomsTechShow how i can make sure external or remote administration of the router is disabled . and yes i will get a key from microsoft once the kms activation end. and all the ports are just to make the router connect to the internet and i chked all the port in all the devises in the house there is not ports just the ports of the router
In many routers it is called "Remote Management" by default it is disabled, so if you have never changed it then it should be off.