KMS activation - status 0xc004f038
-
Saturday, July 07, 2012 6:01 PMI have a few Windows 7 machines that are not activating with our KMS server. I believe the server is working properly because other machines have activated in the past, and even on the ones that won't activate Windows, Office 2010 is activating fine.
When I run slmgr.vbs /ato or use the VAMT tool on one of these Windows 7 machines I get error 0xc004f038. The Key Management Service log on the KMS server does not even show the request coming in, but if I run an Office activation I can see it come in and get activated successfully. Running slmgr.vbs /dli on the server shows:
Any ideas would be appreciated.
All Replies
-
Saturday, July 07, 2012 6:20 PM
Your KMS Hosts requires a minimum of 25 PC's to activate them - if the count is less then you will get this error.
It's possible that the failing clients are attempting to connect to another server?
perhaps comparing the MGADiag reports from failing and OK machines will help troubleshoot.
To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool
(download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
Once saved, run the tool.
Click on the Continue button, which will produce the report.
It can then be pasted in Notepad, or in your response.(did you copy/paste this from another forum? - three broken links are there)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
- Edited by Noel D PatonMicrosoft Community Contributor Saturday, July 07, 2012 6:21 PM
-
Saturday, July 07, 2012 7:05 PM
Thank you for the reply Noel.
On my original post I inserted the screenshot, but it didn't go where I wanted so I did Ctrl+C then Ctrl+V to move it. When I submitted the post the screenshot wasn't there, I tried to edit the post and reinsert it but I then the Submit button didn't do anything (a problem I've had a lot recently on the technet forums, sometimes switching between IE and FF helps) so I delete the whole post and redid it, maybe all that explains the broken links?
Anyway, I may know that the problem is now. I am building a thick image on a master machine and taking backup images along the way with MDT. I restored one of these backup image onto a second machine of the same model to test the sysprep and capture sequence, it's on this first test machine and a second test machine (where I am deploying the sysprep and captured image) that Windows will not activate. I have checked the CMID and they are both the same, but NOT the same as the master machine the image orginally came from. Does this make sense?
Here's the MGADiag report:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-2VJC9-XBBR8-HVTHH
Windows Product Key Hash: k/l/EMDQdwK9OvdCkPtHG1YdosE=
Windows Product ID: 00392-918-5000002-85247
Windows Product ID Type: 1
Windows License Type: KMS Client
Windows OS version: 6.1.7601.2.00010100.1.0.004
ID: {F52EA193-1C0E-4746-A466-390699CDC941}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Enterprise
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120503-2030
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{F52EA193-1C0E-4746-A466-390699CDC941}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.004</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HVTHH</PKey><PID>00392-918-5000002-85247</PID><PIDType>1</PIDType><SID>S-1-5-21-2011193432-4062693889-2095939569</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Veriton S480G</Model></SYSTEM><BIOS><Manufacturer>Acer</Manufacturer><Version>P01-A3</Version><SMBIOSVersion major="2" minor="6"/><Date>20090807000000.000000+000</Date></BIOS><HWID>9C533307018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Enterprise edition
Description: Windows Operating System - Windows(R) 7, VOLUME_KMSCLIENT channel
Activation ID: ae2ee509-1b34-41c0-acb7-6d4650168915
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00392-00170-918-500000-03-1033-7601.0000-1892012
Installation ID: 006021896741368713188395245745167615940656976723547251
Partial Product Key: HVTHH
License Status: Additional grace period (KMS license expired or hardware out of tolerance)
Time remaining: 42540 minute(s) (29 day(s))
Remaining Windows rearm count: 3
Trusted time: 2012-07-07 1:53:26 PM
Please use slmgr.vbs /ato to activate and update KMS client information in order to update values.
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 6:20:2012 12:15
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: MgAAAAEABAABAAIAAAABAAAAAQABAAEA6GGeoLzFKrkCNYQ0RrzKjkARWEmwbri9Rso=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC 080709 APIC0844
FACP 080709 FACP0844
HPET 080709 OEMHPET
MCFG 080709 OEMMCFG
SLIC ACRSYS ACRPRDCT
OEMB 080709 OEMB0844
ASF! LEGEND I865PASF
GSCI 080709 GMCHSCI
AWMI 080709 OEMB0844
SSDT DpgPmm CpuPm -
Saturday, July 07, 2012 7:11 PM
Hi J. Wall,
Please Check this KB : http://support.microsoft.com/kb/983845
Regads,
MCT / MCITP / MCTS / MCSA / C|EH
-
Saturday, July 07, 2012 7:13 PMThanks Las but Office 2010 is activating fine, it's Windows 7 have I'm having problems with
-
Saturday, July 07, 2012 7:47 PM
Sorry for that, but i want to help you , so i send for you an article had same problem please read it hope it solve your error .
KB Link : http://support.microsoft.com/kb/938450
Regards,
MCT / MCITP / MCTS / MCSA / C|EH
-
Saturday, July 07, 2012 7:48 PM
Anyway, I may know that the problem is now. I am building a thick image on a master machine and taking backup images along the way with MDT. I restored one of these backup image onto a second machine of the same model to test the sysprep and capture sequence, it's on this first test machine and a second test machine (where I am deploying the sysprep and captured image) that Windows will not activate. I have checked the CMID and they are both the same, but NOT the same as the master machine the image orginally came from. Does this make sense?
Here's the MGADiag report:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-2VJC9-XBBR8-HVTHH
Windows Product Key Hash: k/l/EMDQdwK9OvdCkPtHG1YdosE=
Windows Product ID: 00392-918-5000002-85247
Windows Product ID Type: 1
Windows License Type: KMS Client
Windows OS version: 6.1.7601.2.00010100.1.0.004
ID: {F52EA193-1C0E-4746-A466-390699CDC941}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Other data-->
SYSTEM><Manufacturer>Acer</Manufacturer><Model>Veriton S480G</Model></SYSTEM><BIOS><Manufacturer>Acer</Manufacturer><Version>P01-A3</Version><SMBIOSVersion major="2" minor="6"/><Date>20090807000000.000000+000</Date></BIOS
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Enterprise edition
Description: Windows Operating System - Windows(R) 7, VOLUME_KMSCLIENT channel
Partial Product Key: HVTHH
License Status: Additional grace period (KMS license expired or hardware out of tolerance)
Time remaining: 42540 minute(s) (29 day(s))
Remaining Windows rearm count: 3
Trusted time: 2012-07-07 1:53:26 PM
Please use slmgr.vbs /ato to activate and update KMS client information in order to update values.
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
SLIC ACRSYS ACRPRDCT
I've filtered out most of the unnecessary stuff, and highlighted a couple of items.
My specific knowledge of KMS activation isn't exactly deep - we do't see too many problems with it in the forums.
I'm a little surprised that what is a 0xC004F00F (HW binding out of tolerance) error in the report is showing as a actiavtion failure - perhaps the server is refusing the reactivation request?
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
-
Saturday, July 07, 2012 8:16 PM
Hmmm, well 2 machines having the same CMID is a problem.
If I can't fix this issue maybe I can prevent it in the future. Can you tell me how I can make a backup image of my master machine without eating up rearms? When would a rearm get used, just when I run sysprep, correct?
-
Saturday, July 07, 2012 10:31 PM
I can't explain it but I reimaged the 2 machines with the same CMID and they can both activate now, even though they still have the same CMID (because they were both imaged with a non-sysprepped image).
To answer my last question:
"From what I've read and my testing this afternoon though, as long as we have a kms server and I have a non-sysprepped image go to back to each time I need to update, I can restore this non-sysprepped image, activate it, and this will give me a rearm back, allowing me to run sysprep /generalize and capture a new image to be deployed to the rest of the machines."
Thanks for letting me bounce ideas off you Noel
- Marked As Answer by J. Wall Saturday, July 07, 2012 10:31 PM
-
Saturday, July 07, 2012 10:36 PM
Heh that's the way I learn most things too :) - find different ways to break it, and quicker ways to fix what you just broke :)
Good Luck - maybe you should get the company to update the software in use as well as the OS? (it'd give the accountants something to do, at least!)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
.png)
