locked
Windows 7 Enterprise - sporadic activation message/error RRS feed

  • Question

  • I have a remote user who will get a Windows Activation error/message about every 2 or 3 months.

    "You must activate today. Activate Windows now", we've run the command to register it with our KMS Server

    "c:\windows\system32>cscript slmgr.vbs -skms HOSTNAME.DOMAIN.COM:1688"

    After running this it will show up as activated again, but will somehow become unactivated again. Last night I assisted with the above command, it was good afterwards, but then upon rebooting it said it needed activated again.

    This user does have an external HDD that has iTunes data on it, is it possible that at one time when this computer was activated the HDD was present, but somehow with removing and/or adding the HDD (he travels with the iTunes HDD) the system detects it's presence or absence, and thinks the system has been tampered with and gets deactivated?

    Thoughts anyone, would this even be possible??

    Regardless, any information or insight into this would be helpful.

    Friday, March 22, 2013 6:51 PM

Answers

  • To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool
    (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
     Once saved, run the tool.
    Click on the Continue button, which will produce the report.
     To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
      - **in your own thread**, please
     
    Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine (or inside the battery compartment), but do NOT quote the Key on the sticker!
    http://www.microsoft.com/en-us/howtotell/Hardware.aspx

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, March 23, 2013 5:51 PM
    Moderator

All replies

  • To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool
    (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
     Once saved, run the tool.
    Click on the Continue button, which will produce the report.
     To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
      - **in your own thread**, please
     
    Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine (or inside the battery compartment), but do NOT quote the Key on the sticker!
    http://www.microsoft.com/en-us/howtotell/Hardware.aspx

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Saturday, March 23, 2013 5:51 PM
    Moderator
  • Here we go, for some of it I had to XXXX or *****out some of the information, ex. computer name, Activation ID, etc. If that makes the data unusable let me know and maybe I can post it directly to you.

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0

    Cached Online Validation Code: N/A, hr = 0xc004f012

    Windows Product Key: *****-*****-2VJC9-XBBR8-HVTHH

    Windows Product Key Hash: k/l/EMDQdwK9OvdCkPtHG1YdosE=

    Windows Product ID: XXXXX-918-5000002-85238

    Windows Product ID Type: 1

    Windows License Type: KMS Client

    Windows OS version: 6.1.7601.2.00010100.1.0.004

    ID: {XXXXXXXX-F503-4F2E-XXXX-097489FE600B}(1)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: N/A, hr = 0x80070002

    Signed By: N/A, hr = 0x80070002

    Product Name: Windows 7 Enterprise

    Architecture: 0x00000000

    Build lab: 7601.win7sp1_gdr.130104-1431

    TTS Error:

    Validation Diagnostic:

    Resolution Status: N/A

     

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

     

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 100 Genuine

    Microsoft Office Small Business 2007 - 100 Genuine

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{XXXXXXXX-F503-4F2E-XXXX-097489FE600B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.004</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-HVTHH</PKey><PID>00392-918-5000002-85238</PID><PIDType>1</PIDType><SID>S-1-5-21-4083216001-2813733801-1644144601</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>OptiPlex 980                 </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2" minor="6"/><Date>20100429000000.000000+000</Date></BIOS><HWID>F1133407018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>B11K   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-00CA-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Small Business 2007</Name><Ver>12</Ver><Val>70819B95470FD86</Val><Hash>KJ4nPA6HFZMczvQr7wU1oXTJpMw=</Hash><Pid>89395-707-9034732-65457</Pid><PidType>14</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

     

    Spsys.log Content: 0x80070002

     

    Licensing Data-->

    Software licensing service version: 6.1.7601.17514

     

    Name: Windows(R) 7, Enterprise edition

    Description: Windows Operating System - Windows(R) 7, VOLUME_KMSCLIENT channel

    Activation ID: XXXXXXXX-1b34-41c0-XXXX-6d4650168915

    Application ID: XXXXXXXX-d682-4d71-XXXX-d6ec3f16059f

    Extended PID: XXXXX-00170-918-500000-XX-1033-XXXX.0000-3422010

    Installation ID: 022225185242256960650815060716709371720256667431246371

    Partial Product Key: HVTHH

    License Status: Licensed

    Volume activation expiration: 256320 minute(s) (178 day(s))

    Remaining Windows rearm count: 1

    Trusted time: 3/25/2013 9:23:11 AM

     

    Key Management Service client information

        Client Machine ID (CMID): XXXXXXXX-6398-XXXX-XXXX-d8beca22f4a5

        Registered KMS machine name: XXXX.corp.XXXXXXXXXXX.com:1688

        KMS machine extended PID: XXXXX-00168-XXX-274241-03-XXXX-7600.0000-3522009

        Activation interval: 120 minutes

        Renewal interval: 10080 minutes

        KMS host caching is enabled

     

    Windows Activation Technologies-->

    HrOffline: 0x00000000

    HrOnline: N/A

    HealthStatus: 0x0000000000000000

    Event Time Stamp: N/A

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

     

     

    HWID Data-->

    HWID Hash Current: OgAAAAIABgABAAIAAAACAAAAAQABAAEA6GGKzRSpNpbiw6R+gJZidULGnm5kgjD8WOlE27PGEklcXQ==

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

    BIOS Information:

      ACPI Table Name           OEMID Value     OEMTableID Value

      APIC                                    DELL                       B11K  

      FACP                                   DELL                       B11K  

      HPET                                    DELL                       B11K  

      BOOT                                  DELL                       B11K  

      MCFG                                 DELL                       B11K  

      SSDT                                    DELL                       st_ex

      ASF!                                     DELL                       B11K  

      TCPA                                   DELL                       B11K  

      DMAR                                 DELL                       B11K  

      SLIC                                      DELL                       B11K  

      SSDT                                    DELL                       st_ex

     


    Monday, March 25, 2013 3:08 PM
  • Hmmm - there's nothing amiss that I can see in these results - the machine is activated fine.

    I do notice that KB971033 appears to be installed. If the machines are behind a corporate firewall that blocks this updates capabilities, it could cause a non-genuine status.

     

    Looking back at your original post, I see you mentioned external drives. These can sometimes cause problems if they are eSATA, and the eSATA post is earlier in the boot process than the onboard port (the system assumes that the System Drive has moved, and therefore calls it a new installation requiring activation)

    Another possibility is the NIC configuration and health - Changing the MAC address of an NIC will almost always cause a re-activation request, as can one which is failing intermittently. Having two NIC's can lead to complications if the one seen by Windows at activation is no longer visible when it checks (a good reason to activate with only the one NIC installed, and add any second one later)

    If you can get a report while the machine is in a non-genuine state, it would give us more to work with, as would copies of the System and Application event logs - the error message for the (failing) SPP service in the Application logs particularly, if you're concerned about confidentiality.

     

    Event Source: Security-SPP

    Event ID: 1003 (for valid license, at least - I don't have a faulty output to hand to check for invalid ones)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, March 25, 2013 3:51 PM
    Moderator
  • Thank you, we're going to replace this computer with a newer one, when we get this one back I'll see if I can recreate the issue again and reply back with the information you need.

    Very much appreciated!

    Monday, March 25, 2013 3:55 PM
  • You're welcome - I'll look forward to the results!

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, March 25, 2013 4:12 PM
    Moderator
  • Another possible cause, I noticed the computer SID listed in the report doesn't match the actual SID of this computer that is in ADSI Edit. Prior to when I started most of our our images were cloned and sysprep was not being performed. After I noticed this issue I brought it to the attention of management and started correctly imaging equipment. With that being said, is it possible the referenced SID is referring to the original computer that was cloned from, and within KMS it registers a host with the SID?  Just throwing it out there.

    Monday, March 25, 2013 5:54 PM
  • It depends what you're calling the SID? If you mean the Windows SID, then so far as I know, activation totally ignores it http://blogs.technet.com/b/markrussinovich/archive/2009/11/03/3291024.aspx refers, I believe

    If you mean the CMID from the KMS area of the report, then that is a possibility, although my knowledge doesn't extend that deep.

    ... and then there's the UGUID from the 'Other Data' section about which I really know nothing.

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Monday, March 25, 2013 6:35 PM
    Moderator