locked
WGA fails only when pushed thru WSUS system. Volume Licence Key RRS feed

  • Question

  • currently we have about 10-15 computers off various makes and models that are displaying that the software may be counterfit.  all machines use the same VLK and i know its valid because we have it insalled on a few hundred other machines.  so heres what i have figured out so far:

    1. its not specific to any sort of hardware, so it cant be a problem in the images
    2. if you take a machine that had the problem, put the same image back on it and then run windows updates via the website everything works fine.
    3. The WGA fraud error seems to only come up intermittently.
    4. The problem only occurs when the updates come from the WSUS server

    heres the list of updates from WSUS:
    kb920142
    Media player 11
    media player 11 for media center
    KB928255
    KB928843
    KB927802
    KB928090
    KB924667
    KB927779
    KB918118
    KB926436
    KB923723
    KB928090
    KB925720
    KB926356
    KB928416
    KB917275
    KB929969
    KB929969 for IE7

    i just downloaded the WGA diagnostic tool but i haven't had a chance to run it on a machine exhibiting symptoms yet.  our fear is that this problem may start to spread and gradually effect the whole network.
    Thursday, March 8, 2007 1:46 AM

Answers

  • Hi Kurbycar32,

      From your description, I think I know what the problem is. But let me confirm a few things.

      Are these computers in a network, and if so, are you using remote security profiles?

      If the answer is yes, then the issue is most likely an interaction between remote security profiles and WGA.  This issue usually occurs when customers have remote security profiles on a slow(ish) network – causing a time-out in security profile loading and forcing cryptographic to not work properly. This causes WGA Notifications to signal. The fix to this has been included in builds of remote security profiles later than 1.5.540.0 (which is why you don't see the issue with computers you have run Windows Update on as a more recent build of WGA Notifications is available there)

      You can also download the most recent version of WGA Notifications at  http://go.microsoft.com/fwlink/?linkid=69498

    Thank you,
    Darin Smith
    WGA Forum Program Manager


    ------------------------------------------

    All Users: Please go to http://forums.microsoft.com/Genuine/ShowPost.aspx?PostID=1255325&SiteID=25 before posting a question.
    ------------------------------------------

    Thursday, March 8, 2007 6:43 PM
  • yes all machines are on a windows network running a 2k3 domain.
    i just confirmed with our server admin that we are NOT using remote security profiles.  i will have our server admin make sure that the most recent version of WGA is being pushed out.
    Thursday, March 8, 2007 10:10 PM

All replies

  • Hi Kurbycar32,

      From your description, I think I know what the problem is. But let me confirm a few things.

      Are these computers in a network, and if so, are you using remote security profiles?

      If the answer is yes, then the issue is most likely an interaction between remote security profiles and WGA.  This issue usually occurs when customers have remote security profiles on a slow(ish) network – causing a time-out in security profile loading and forcing cryptographic to not work properly. This causes WGA Notifications to signal. The fix to this has been included in builds of remote security profiles later than 1.5.540.0 (which is why you don't see the issue with computers you have run Windows Update on as a more recent build of WGA Notifications is available there)

      You can also download the most recent version of WGA Notifications at  http://go.microsoft.com/fwlink/?linkid=69498

    Thank you,
    Darin Smith
    WGA Forum Program Manager


    ------------------------------------------

    All Users: Please go to http://forums.microsoft.com/Genuine/ShowPost.aspx?PostID=1255325&SiteID=25 before posting a question.
    ------------------------------------------

    Thursday, March 8, 2007 6:43 PM
  • yes all machines are on a windows network running a 2k3 domain.
    i just confirmed with our server admin that we are NOT using remote security profiles.  i will have our server admin make sure that the most recent version of WGA is being pushed out.
    Thursday, March 8, 2007 10:10 PM