Can a KMS activated machine renew its activation via Azure AD?

Question

_{Monday, March 30, 2020 2:58 PM}

My customer is wondering if a KMS activated machine can renew its activation via Azure AD. They synced all of their workstations to Azure AD last year, and now with so many people working from home they were worried about how they will keep their Win10 key active. Do you know if machines that are members of Azure AD will continue to verify their license key without seeing the domain?

All replies (4)

_{Tuesday, March 31, 2020 8:07 AM ✅Answered}

Hello,

Yes, you can renew your KMS activated machine via Azure AD. If activation or reactivation is required, the following sequence occurs:

1. If the computer is a member of a domain, it asks a domain controller for a volume activation object. If Active Directory-based activation is configured, the domain controller returns the object. If the object matches the edition of the software that is installed and the computer has a matching GVLK, the computer is activated (or reactivated), and it will not need to be activated again for 180 days, although the operating system will attempt reactivation at much shorter, regular intervals.
2. If the computer is not a member of a domain or if the volume activation object is not available, the computer will issue a DNS query to attempt to locate a KMS server. If a KMS server can be contacted, activation occurs if the KMS has a key that matches the computer’s GVLK.

Best regard,

Sylvia

"Windows 10 Installation, Setup, and Deployment" forum will be migrating to a new home on Microsoft Q&A (Preview)!
We invite you to post new questions in the "Windows 10 Installation, Setup, and Deployment" forum’s new home on Microsoft Q&A (Preview)!
For more information, please refer to the sticky post.

_{Monday, March 30, 2020 5:34 PM}

Hello,

KMS clients do not require the Domain or Azure, they just need access to the KMS host

Do the KMS users VPN into the corporate network? That should allow the KMS clients to renew the licenses.

Where is the KMS host located?  The clients query DNS to locate a KMS host.

You can query on the clients to see if DNS is reporting a KMS host:

nslookup -type=all _vlmcs._tcp  <o:p></o:p>

Thanks, Darrell Gorter This posting is provided "AS IS" with no warranties, and confers no rights.

_{Tuesday, March 31, 2020 4:47 PM}

Hi Darrell,

The big issue is not all users will be connecting to the domain through VPN. The KMS host is an internal server.

Would the KMS host need to be in Azure for Azure AD to allow the machines to reactivate?

Paul

_{Friday, April 3, 2020 3:39 PM}

Hello,

I am not aware of how to get KMS working though AZURE for remote clients, you may have to switch the KMS clients to MAK keys to allow them to activate.

Thanks, Darrell Gorter This posting is provided "AS IS" with no warranties, and confers no rights.