Answered by:
Windows 7 Enterprise - sporadic activation message/error

Question
-
I have a remote user who will get a Windows Activation error/message about every 2 or 3 months.
"You must activate today. Activate Windows now", we've run the command to register it with our KMS Server
"c:\windows\system32>cscript slmgr.vbs -skms HOSTNAME.DOMAIN.COM:1688"
After running this it will show up as activated again, but will somehow become unactivated again. Last night I assisted with the above command, it was good afterwards, but then upon rebooting it said it needed activated again.
This user does have an external HDD that has iTunes data on it, is it possible that at one time when this computer was activated the HDD was present, but somehow with removing and/or adding the HDD (he travels with the iTunes HDD) the system detects it's presence or absence, and thinks the system has been tampered with and gets deactivated?
Thoughts anyone, would this even be possible??
Regardless, any information or insight into this would be helpful.
Friday, March 22, 2013 6:51 PM
Answers
-
To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool
(download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
Once saved, run the tool.
Click on the Continue button, which will produce the report.
To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
- **in your own thread**, please
Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine (or inside the battery compartment), but do NOT quote the Key on the sticker!
http://www.microsoft.com/en-us/howtotell/Hardware.aspxNoel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.- Proposed as answer by Noel D PatonModerator Sunday, March 24, 2013 2:34 PM
- Marked as answer by george1009Editor Tuesday, April 2, 2013 2:20 PM
Saturday, March 23, 2013 5:51 PMModerator
All replies
-
To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool
(download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
Once saved, run the tool.
Click on the Continue button, which will produce the report.
To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
- **in your own thread**, please
Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine (or inside the battery compartment), but do NOT quote the Key on the sticker!
http://www.microsoft.com/en-us/howtotell/Hardware.aspxNoel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.- Proposed as answer by Noel D PatonModerator Sunday, March 24, 2013 2:34 PM
- Marked as answer by george1009Editor Tuesday, April 2, 2013 2:20 PM
Saturday, March 23, 2013 5:51 PMModerator -
Here we go, for some of it I had to XXXX or *****out some of the information, ex. computer name, Activation ID, etc. If that makes the data unusable let me know and maybe I can post it directly to you.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-2VJC9-XBBR8-HVTHH
Windows Product Key Hash: k/l/EMDQdwK9OvdCkPtHG1YdosE=
Windows Product ID: XXXXX-918-5000002-85238
Windows Product ID Type: 1
Windows License Type: KMS Client
Windows OS version: 6.1.7601.2.00010100.1.0.004
ID: {XXXXXXXX-F503-4F2E-XXXX-097489FE600B}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Enterprise
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.130104-1431
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 100 Genuine
Microsoft Office Small Business 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{XXXXXXXX-F503-4F2E-XXXX-097489FE600B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.004</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-HVTHH</PKey><PID>00392-918-5000002-85238</PID><PIDType>1</PIDType><SID>S-1-5-21-4083216001-2813733801-1644144601</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>OptiPlex 980 </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2" minor="6"/><Date>20100429000000.000000+000</Date></BIOS><HWID>F1133407018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>B11K </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-00CA-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Small Business 2007</Name><Ver>12</Ver><Val>70819B95470FD86</Val><Hash>KJ4nPA6HFZMczvQr7wU1oXTJpMw=</Hash><Pid>89395-707-9034732-65457</Pid><PidType>14</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Enterprise edition
Description: Windows Operating System - Windows(R) 7, VOLUME_KMSCLIENT channel
Activation ID: XXXXXXXX-1b34-41c0-XXXX-6d4650168915
Application ID: XXXXXXXX-d682-4d71-XXXX-d6ec3f16059f
Extended PID: XXXXX-00170-918-500000-XX-1033-XXXX.0000-3422010
Installation ID: 022225185242256960650815060716709371720256667431246371
Partial Product Key: HVTHH
License Status: Licensed
Volume activation expiration: 256320 minute(s) (178 day(s))
Remaining Windows rearm count: 1
Trusted time: 3/25/2013 9:23:11 AM
Key Management Service client information
Client Machine ID (CMID): XXXXXXXX-6398-XXXX-XXXX-d8beca22f4a5
Registered KMS machine name: XXXX.corp.XXXXXXXXXXX.com:1688
KMS machine extended PID: XXXXX-00168-XXX-274241-03-XXXX-7600.0000-3522009
Activation interval: 120 minutes
Renewal interval: 10080 minutes
KMS host caching is enabled
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: OgAAAAIABgABAAIAAAACAAAAAQABAAEA6GGKzRSpNpbiw6R+gJZidULGnm5kgjD8WOlE27PGEklcXQ==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC DELL B11K
FACP DELL B11K
HPET DELL B11K
BOOT DELL B11K
MCFG DELL B11K
SSDT DELL st_ex
ASF! DELL B11K
TCPA DELL B11K
DMAR DELL B11K
SLIC DELL B11K
SSDT DELL st_ex
Monday, March 25, 2013 3:08 PM -
Hmmm - there's nothing amiss that I can see in these results - the machine is activated fine.
I do notice that KB971033 appears to be installed. If the machines are behind a corporate firewall that blocks this updates capabilities, it could cause a non-genuine status.
Looking back at your original post, I see you mentioned external drives. These can sometimes cause problems if they are eSATA, and the eSATA post is earlier in the boot process than the onboard port (the system assumes that the System Drive has moved, and therefore calls it a new installation requiring activation)
Another possibility is the NIC configuration and health - Changing the MAC address of an NIC will almost always cause a re-activation request, as can one which is failing intermittently. Having two NIC's can lead to complications if the one seen by Windows at activation is no longer visible when it checks (a good reason to activate with only the one NIC installed, and add any second one later)
If you can get a report while the machine is in a non-genuine state, it would give us more to work with, as would copies of the System and Application event logs - the error message for the (failing) SPP service in the Application logs particularly, if you're concerned about confidentiality.
Event Source: Security-SPP
Event ID: 1003 (for valid license, at least - I don't have a faulty output to hand to check for invalid ones)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Monday, March 25, 2013 3:51 PMModerator -
Thank you, we're going to replace this computer with a newer one, when we get this one back I'll see if I can recreate the issue again and reply back with the information you need.
Very much appreciated!
Monday, March 25, 2013 3:55 PM -
You're welcome - I'll look forward to the results!
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Monday, March 25, 2013 4:12 PMModerator -
Another possible cause, I noticed the computer SID listed in the report doesn't match the actual SID of this computer that is in ADSI Edit. Prior to when I started most of our our images were cloned and sysprep was not being performed. After I noticed this issue I brought it to the attention of management and started correctly imaging equipment. With that being said, is it possible the referenced SID is referring to the original computer that was cloned from, and within KMS it registers a host with the SID? Just throwing it out there.
Monday, March 25, 2013 5:54 PM -
It depends what you're calling the SID? If you mean the Windows SID, then so far as I know, activation totally ignores it http://blogs.technet.com/b/markrussinovich/archive/2009/11/03/3291024.aspx refers, I believe
If you mean the CMID from the KMS area of the report, then that is a possibility, although my knowledge doesn't extend that deep.
... and then there's the UGUID from the 'Other Data' section about which I really know nothing.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
No - I do not work for Microsoft, or any of its contractors.Monday, March 25, 2013 6:35 PMModerator