win 7 enterprise KMS activation error

fuunu · 23 Sep 2015

Would post the diag but for some reason it won't copy or paste. Can't post windows update log as security settings block internet access while logged in as an admin, can't burn to CD as the CD drive is turned off in BIOS by higher HQ, can't use thumb drives as they are not allowed in goverment machines so it's turned off as well.

Anyways to the problem at hand. I am a system admin on a military network. We use windows 7 enterprise with a KMS activation. We use WDS for imaging systems. Recently after we image or reimage a machine we have been occasional get non genuine. It's not for every system maybe 10-15% of the systems.
Ran the MGAdiag and received the following results.
Valadition code 50
PID 00392-918-5000002-85131
TTS T:20150923093955402

What other info do we need.

Layback Bear · 23 Sep 2015

I'm no expert on such matters but I do suggest you contact what you call (higher HQ).

My reasoning is because this is a government military system.
If you don't have permission from the (higher HQ) we surly don't either. Their is probably military and government security methods being used that I don't believe we should interfere with.

Note to all.
This is my opinion. Not to be confuse with forum rules or guide lines.

fuunu · 23 Sep 2015

Layback Bear said:

I'm no expert on such matters but I do suggest you contact what you call (higher HQ).

My reasoning is because this is a government military system.
If you don't have permission from the (higher HQ) we surly don't either. Their is probably military and government security methods being used that I don't believe we should interfere with.

Note to all.
This is my opinion.

Yeah they're clueless as well so they tasked me with the troubleshooting

UsernameIssues · 23 Sep 2015

You have a good topic title. It should attract forum members that work with KMS servers (if we have any). In the mean time, have you contacted Microsoft?

fuunu · 23 Sep 2015

UsernameIssues said:

You have a good topic title. It should attract forum members that work with KMS servers (if we have any). In the mean time, have you contacted Microsoft?

Never have luck with those people evry time i call them they act like we're idiots. I know that a falling of alot of techs in the support roles. Not just computer techs do it, mechanics, doctors and others as well.

UsernameIssues · 23 Sep 2015

Unfortunately, I agree. I've wasted hours and hours with Microsoft support staff remotely controlling various computers while they follow their heavily scripted steps. When I get transferred to another support level, they insist on starting the scripted steps from scratch. I have yet to have a Microsoft support staff actually fix any issue. That said, I was hoping that KMS issues would be handled better. You might get lucky and one of their scripted steps might actually work

torchwood · 23 Sep 2015

I suspect thier using a third party "controller", like Lanman, for all windows updates and features and that (your higher-ups) will need to contact them to alter any limitations that they have put in place.

Roy

NoelDP · 24 Sep 2015

You have a Trusted Store Tamper - often caused by Malware.

Assuming you have the appropriate permissions...
Please download and install Malwarebytes Anti-malware (free version) from Malwarebytes | Free Anti-Malware Detection & Removal Software - UNtick 'Enable free trial of MBAM Premium' at the end of the installation - and update it, then run a full scan in your main account, and Quick scans in any other user accounts.

Quarantine everything it finds

Once complete, reboot TWICE and see if the timestamp on the TTS error has changed. If it has, then there is something still amiss.
You may be better to re-image the machine

If the timestamp hasn't changed try this...

Recreate the Licensing Store
Go to Start > All Programs > Accessories
Right-Click on Command Prompt and select Run as Administrator - accept the UAC prompt
Run the following commands in the Command Prompt window, using the Enter key at the end of each

net stop sppsvc
(wait until the service has stopped before entering the following lines)

CD %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform
REN tokens.dat tokens.bar
net start sppsvc
slui.exe

After a couple of seconds the Windows Activation dialog will appear.
You may be asked to re-activate and/or re-enter your product key, or Activation may occur automatically.
If you are asked for your Key, use the one on the COA sticker on the machine's case

Reboot and Post back with a new MGADiag report.

(Note: the Line 'CD %win......\SoftwareProtectionPlatform' is all on one line - it may be broken in the Forum listing)

fuunu · 29 Sep 2015

NoelDP said:

You have a Trusted Store Tamper - often caused by Malware.

(Note: the Line 'CD %win......\SoftwareProtectionPlatform' is all on one line - it may be broken in the Forum listing)

Yeah already tried that. First we are on a goverment network behind mutiple firewalls with constant scanning for viruses and Malware. Also before we image the machine with WDS we format the drives then install the new image. Plus half of these machines are fresh out of the box and never been imaged. Out of 200 plus pc's imaged over 100 of were brand new computers and about 20 of them failed. If the problem is with the KMS server then why are only a percentage affected.