WGA-Blocked VLK
I am the system analyst in charge of building images for our company of over 1000 users. We have a valid Volume License for Windows XP SP2. Previous to the release of WGA, we had no problems duplicating and deploying images. Our standard process is to build an XP machine, install the standard app suite, install all MS updates and then run Sysprep 2.0 with the MiniSetup and Pre-Activated switches turned on. After running the Re-seal in Sysprep, we shut the master machine down and place the hard drive in a disk duplicator.We then use the disk-duplicator to mirror the images on target hard drives. The hard drives are put back in their respective machines and booted up. The Mini-setup process would generate new SIDs and activate Windows automatically. This process has worked perfectly until the release of WGA. Now, during the Mini-setup, we are given an Invalid Product Key message during the activation phase and our valid VL does not work. I just built a new machine from the XP SP2 CD and used our VL key. It activated successfully during the installation process. However, as soon as I go to the MS Update website and install the WGA Tool, I receive a warning that "This copy of Windows is not genuine". When I run the MGA Diagnostic Tool, I receive the following Windows Validation info:
Blocked VLK
Please assist. Thank you.
Don C.
Answers
Dxtopher,
Occasionally we have had some customers that purchased valid copies of Windows or received them when purchasing an OEM system but failed validation. In most cases this has been determined to be the result of the actual Product Key used to install the current version of Windows XP to be blocked. This most often has occurred by the computer being repaired and a Blocked Product Key being used on the computer at that time.
To confirm there are no other blocking issues with your validation such as clock out of synch or IE settings blocking the validation process please run the WGA Diagnostics located here:
http://www.microsoft.com/genuine/diag/
If everything here is confirmed as functioning properly and you still have issues validating could you please run the wgadiag tool again and post the information for us.
http://go.microsoft.com/fwlink/?linkid=52012
Without actually posting your Product Key in this post compare the last 15 characters of your COA to the last 15 characters in the Diag output. If they are not the same you will have to change the product key. The easiest way to do this without having to re-install applications or lose data is to refer to the Repair Method in this KB Article.
http://support.microsoft.com/kb/315341/en-us
Warning: as with any such major procedure it is highly recommended you backup all critical/personal data on your computer that you would not want to lose and ensure you have the software to re-install your applications should something happen.
We can also attempt to change the key using the Product Key Update tool below. The Genuine Advantage Product Key Update Tool is only valid for users attempting to change their current non-genuine Product Key to a genuine COA sticker or genuine Product Key – all without a reinstall! http://www.microsoft.com/genuine/selfhelp/PkuInstructions.aspx?displayLang=en
Note: This is provided no core system files are corrupted. If they are you will need to complete a clean install of your system.
Dxtopher:
Microsoft does not randomly block VLK's without first investigating the leak-extent and as well contacting the owning company.
Have you tried the fix above manually? If so, chances are it was part of the problem that occured Oct 2-3 :(.
-phil
All Replies
Dxtopher,
Occasionally we have had some customers that purchased valid copies of Windows or received them when purchasing an OEM system but failed validation. In most cases this has been determined to be the result of the actual Product Key used to install the current version of Windows XP to be blocked. This most often has occurred by the computer being repaired and a Blocked Product Key being used on the computer at that time.
To confirm there are no other blocking issues with your validation such as clock out of synch or IE settings blocking the validation process please run the WGA Diagnostics located here:
http://www.microsoft.com/genuine/diag/
If everything here is confirmed as functioning properly and you still have issues validating could you please run the wgadiag tool again and post the information for us.
http://go.microsoft.com/fwlink/?linkid=52012
Without actually posting your Product Key in this post compare the last 15 characters of your COA to the last 15 characters in the Diag output. If they are not the same you will have to change the product key. The easiest way to do this without having to re-install applications or lose data is to refer to the Repair Method in this KB Article.
http://support.microsoft.com/kb/315341/en-us
Warning: as with any such major procedure it is highly recommended you backup all critical/personal data on your computer that you would not want to lose and ensure you have the software to re-install your applications should something happen.
We can also attempt to change the key using the Product Key Update tool below. The Genuine Advantage Product Key Update Tool is only valid for users attempting to change their current non-genuine Product Key to a genuine COA sticker or genuine Product Key – all without a reinstall! http://www.microsoft.com/genuine/selfhelp/PkuInstructions.aspx?displayLang=en
Note: This is provided no core system files are corrupted. If they are you will need to complete a clean install of your system.
Here is the info from the MGA Diagnostic tool:
Diagnostic Report (1.5.0545.0):
-----------------------------------------
WGA Data-->
Validation Status: Blocked VLK
Windows Product Key: *****-*****-33YJW-HTFC3-2DBGY
Windows Product Key Hash: 5O4ooZ7kup//+Fh2JYj2QMhWo9U=
Windows Product ID: 76487-640-8597042-23089
Windows Product ID Type: 1
Windows License Type: Volume
Windows OS version: 5.1.2600.2.00010100.2.0.pro
ID: d9fdde94-de3c-4437-b5bb-a6f9062392d2
Is Admin: Yes
AutoDial:
Registry: 0x0
WGA Version: Registered, 1.5.708.0
Signed By: Microsoft
Validation Diagnostic:
Resolution Status: N/ASystem Scan Data-->
Scan: Complete
Cryptography: CompleteNotifications Data-->
Cached Result: N/A
File Exists: No
Version: N/A
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Data-->
Office Status: 109
Office Diagnostics: B4D0AA8B-467-80070002Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>d9fdde94-de3c-4437-b5bb-a6f9062392d2</UGUID><Version>1.5.0545.0</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><PKey>*****-*****-*****-*****-2DBGY</PKey><PID>76487-640-8597042-23089</PID><PIDType>1</PIDType><SID>S-1-5-21-725345543-1682526488-1801674531</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Latitude D620 </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A04</Version><SMBIOSVersion major="2" minor="4"/><Date>20060828000000.000000+000</Date></BIOS><HWID>8BB83407018400EE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone></MachineData> <Software><Office><Result>109</Result><Products/></Office></Software></GenuineResults>- Since VL licensing does not require Product Activation, are you sure you used the VL Windows XP CD to create your image?
- Yes, I used the CD and VLK provided by our approved vendor. Thanks.
Dxtopher:
A few questions (if you could answer them, that'd be great!)
1 - when did this start happening?
2 - what geographical location is your company in?
3 - is it possible to get the diagnostics output from a computer *not* experiencing the issue? Assuming you have such access within the company resources?
I'd like to get that data to compare with your current diagnostics output above to see whats going on. If not, let me know ASAP. Thanks!
-phil
First, some background. We have been using Dell X-Image for 2-3 years now to crank out one-off images to production machines. There has been and still is no issue with activation on these machines once they are imaged. When we have a large run of machines to image (20-30), we use the X-Image, Sysprep and the Disk Duplicator to dupe them quickly (I use the same process on about 100 Fujitsu Tablets using another VLK from the same vendor without any issues.). This process worked fine until the introduction of your Windows Genuine Advantage program. BTW, the X-Image process uses one of the VLKs that is currently giving us problems with WGA after the Sysprep process. I feel that Sysprep is somehow part of the problem here. So, to answer your questions:
1. Problem began around the same time as your WGA validation program.
2. We are located in the Greater Detroit area.
3. I will run the diagnostics program on an X-Imaged machine for you to compare. Thanks.
Do you have access to one of the "Blocked VLK" Machines?
If so, then I have some steps that you can try, let me know how this works -
1) Please locate the data.dat file from C:\Documents and Settings\All Users\Applicaiton Data\Windows Genuine Advantage\data - can you please tell me the date the file was created?
2) Delete the data.dat file from C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage\data (The drive letter will depend on where the OS was installed)
3) Revisit http://www.microsoft.com/genuine/downloads/validate.aspx to confirm that the machine is now genuine.
4) Run wgatray.exe /b from the command line to ensure that the latest validation is updated for WGA Notifications. This command may not be present on the user’s machine and should not be considered an error if it is not. Please ensure that this is run as an Administrator. A reboot may be required to remove all non-genuine notifications.
Let me know ASAP,
-phil
Phil,
I can't try this because the affected machines will not complete the MINI-setup due to the Invalid Product ID error. Note-I received two more VLKs from corporate hq that they claim to be valid. They do not work if I enter them during the Mini-setup phase. Thanks,
Don C.
- OK, here is an interesting development. I stripped out the VLK that Dell uses in our X-Image sysprep .inf file and used it in re-sysprepping one of these blocked machines. It worked perfectly. Which begs the question, why are 4 supposedly valid corporate VLKs being blocked??
Hello? Phil?
Any comments, suggestions?
Don C.
- The Microsoft Policy Concerning Disk Duplication of Windows XP Installations
http://support.microsoft.com/default.aspx?scid=kb;en-us;314828&Product=winxp
Do not disk duplicate installed versions of Windows
http://support.microsoft.com/kb/162001/en-us
How to Use Sysprep: An Introduction
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/introduction.mspx
Preserving OEM Pre-Activation when Re-installing Windows XP
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/oempreac.mspx
How to change the SID on a Windows XP, Windows 2000, or Windows NT computer
http://service1.symantec.com/SUPPORT/ghost.nsf/docid/1999050308324125 Dxtopher wrote: Hello? Phil?
Any comments, suggestions?
Don C.
Dxtopher:
Regarding your question around the VLK issue - please check the sticky at the very top of the forum. Assuming you're experiencing the same issue, there shouldn't be any problem using your original images.
Can you help clarify what MINI-Setup with norton ghost is exactly?
-phil
To respond,
Do not disk duplicate installed versions of Windows
http://support.microsoft.com/kb/162001/en-usQuoted from the link you sent me...
"Microsoft supports computers that were installed by using disk-duplicating software and the System Preparation Tool (Sysprep.exe)."
I believe that I have followed all of the recommended guidelines you have pointed me to here. I do appreciate your input. I think, in my own roundabout way, I have arrived at the solution to my problem. I am still concerned, however, regarding the issue of our blocked VLKs. Thanks again.
Can you help clarify what MINI-Setup with norton ghost is exactly?
Phil,
I am referring to the Mini-setup in Sysprep 2.0 here. Sorry for the mixup. Thanks.
Don C
Dxtopher:
Microsoft does not randomly block VLK's without first investigating the leak-extent and as well contacting the owning company.
Have you tried the fix above manually? If so, chances are it was part of the problem that occured Oct 2-3 :(.
-phil
- ummmm...
> Windows Product Key: *****-*****-33YJW-HTFC3-2DBGY
> Windows Product Key Hash: 5O4ooZ7kup//+Fh2JYj2QMhWo9U=
... you know how little entropy there is in the masked region '*****_*****' ? 52 bits ! Not much! One can cycle through the possible values for *****_***** hashing each potential key until one hits the hash result indicated.
I haven't looked at the actual code to see how much salting there is, but by posting the last 15 characters of your key you've pretty much done most of the job for the pirate.
Your VL key probably just went public. Tsk Tsk. it said's this copy of windows is not genuine ineed to get updates for my computer
Rose Ann,
Are you receiving the WGA Blocked VLK? Please submit any error codes and/or statements surrounding what your experiencing. Also please run the MGA diagnostic test and post your results in a New thread. Please follow the steps below:
Download and run the utility at this link http://go.microsoft.com/fwlink/?linkid=52012 , then click the Windows tab, Copy to Clipboard, then paste the report into a New Post on this Forum.
Step 2 is tell us about the COA. Tell us:
1. What edition of Windows XP is it for, Home, Pro, or Media Center?
2. Does it read "OEM Software" or "OEM Product" in black lettering?
3. Or, does it have the computer manufacturer's name in black lettering?
4. DO NOT post the Product Key.
5. Please also provide a short description of the issue you are experiencing.NOTE: The data collected with the Genuine Diagnostics Tool does NOT contain any information that can personally identify you and can be fully reviewed, by you, before being posted.
Thank you,
Stephen Holm, MS
