volume activation planning guide windows7

7/24/2019 Volume Activation Planning Guide Windows7

http://slidepdf.com/reader/full/volume-activation-planning-guide-windows7 1/42

Volume Activation Planning GuideWindows 7 and Windows Server 2008 R2

Microsoft Corporation

Published: June 2009

Abstract

Volume Activation helps Volume Licensing customers automate and manage the activationprocess of Volume Licensing media Volume Licensing customers and special programsubscribers such as the Microsoft Partner Program! M"#$%! and Microsoft% &ech$et'areeligible for Volume Licensing soft(are and media &his guide is for information technolog)*+&, professionals (hose organi-ations are planning to deplo) Volume Activation versionsof the .indo(s% / and .indo(s "erver% 200 12 operating s)stems



&his document and an) document referenced herein is provided for informational purposes onl) and Microsoft maes no

(arranties! either e3press or implied! in this document +nformation in this document! including 41L and other +nternet .eb

site references! is sub5ect to change (ithout notice &he entire ris of the use or the results from the use of this document

remains (ith the user 4nless other(ise noted! the companies! organi-ations! products! domain names! e6mail addresses!

logos! people! places! and events depicted in e3amples herein are fictitious $o association (ith an) real compan)!

organi-ation! product! domain name! e6mail address! logo! person! place! or event is intended or should be inferred

Compl)ing (ith all applicable cop)right la(s is the responsibilit) of the user .ithout limiting the rights under cop)right! no

part of this document ma) be reproduced! stored in or introduced into a retrieval s)stem! or transmitted in an) form or b)

an) means *electronic! mechanical! photocop)ing! recording! or other(ise,! or for an) purpose! (ithout the e3press (ritten

permission of Microsoft Corporation

Microsoft ma) have patents! patent applications! trademars! cop)rights! or other intellectual propert) rights covering

sub5ect matter in this document 73cept as e3pressl) provided in an) (ritten license agreement from Microsoft! the

furnishing of this document does not give )ou an) license to these patents! trademars! cop)rights! or other intellectual

propert)

8 2009 Microsoft Corporation All rights reserved

Microsoft! Active #irector)! )per6V! M"#$! .indo(s! the .indo(s logo! .indo(s "erver! .indo(s Vista! and .indo(s

.eb "erver are trademars of the Microsoft group of companies

&he names of actual companies and products mentioned herein ma) be the trademars of their respective o(ners



Contents

+ntroduction

Learn About Product Activation;Activation <ptions;

1etail;

<riginal 7=uipment Manufacturer/

Volume Licensing/

Volume Activation Models

>e) Management "ervice

Multiple Activation >e)

.hat +f ")stems Are $ot Activated?9

@race Period9

@race Period 73piration9

Product >e)s0

1evie( Available Activation Models

>e) Management "ervice

Minimum Computer 1e=uirements

o( >M" .orsB

Planning a >M" #eplo)ment

Multiple Activation >e)

Volume Activation Management &ool9

MA> Architecture97valuate Client Connectivit)20

Core $et(or22

+solated $et(ors2B

igh6"ecurit) one2B

Dranch <ffice Locations2

+ndividual #isconnected Computers2;

&estE#evelopment Labs2;

Map Computers to an Activation Method2

#etermine Product >e) $eeds29Choosing the MA> >e)B0

Choosing the >M" >e)B

Choosing the >M" ostBB

#etermine Monitoring and 1eporting $eedsB

.indo(s Management +nstrumentationB

")stem Center Configuration ManagerB



7vent LogsB;

>M" Management PacB;

Volume Activation Management &oolB;

Appendi3 A: +nformation "ent to MicrosoftB/

Appendi3 D: Licensing ConditionsB

ActivatedB9

@raceB9

@enuineB9

$otificationsF0



Introduction

Volume Activation is a configurable solution that helps +& pros automate and

manage the product6activation process on computers that are running the .indo(s

Vista%! .indo(s% /! .indo(s "erver% 200! and .indo(s "erver 200 12

operating s)stems licensed under a Microsoft% Volume Licensing program and

other programs that provide Volume License editions of .indo(s &his guide

provides planning steps and scenarios to assist in planning a Volume Activation

deplo)ment specificall) for the .indo(s / and .indo(s "erver 200 12 operating

s)stems

ote &his document provides Volume Activation planning guidance for the .indo(s / and .indo(s

"erver 200 12 operating s)stems o(ever! this guide does address interoperabilit) bet(een both

generations of products Gor more information about planning Volume Activation for .indo(s Vista

and .indo(s "erver 200! see Volume Activation 20 &echnical @uidance on the Microsoft .eb site

*http:EEgomicrosoftcomEf(linE?Lin+#H/;/F,

A Volume Activation deplo)ment includes the follo(ing steps:

Learn about product activation

2 1evie( available activation models

B 7valuate client connectivit)

F Map the ph)sical computer or virtual machine to an activation method

#etermine product e) needs

; #etermine monitoring and reporting needs

http://go.microsoft.com/fwlink/?LinkID=75674




!earn About Product Activation

Product activation is the process of validating soft(are (ith the manufacturer

Activation confirms the genuine status of a product and that the product e) is not

compromised +t is analogous to the activation of credit cards or ne( mobile

phones Activation establishes a relationship bet(een the soft(areIs product e)

and a particular installation of that soft(are on a device

All activation methods that are used b) Microsoft are designed to help protect user

privac) #ata that is sent during activation is not traceable to the computer or user

&he data that is gathered is used to confirm that the soft(are is a legall) licensed

cop) +t is then aggregated for statistical anal)sis Microsoft does not use this

information to identif) or contact the user or organi-ation

Gor e3ample! during online activations! information such as the soft(are version!

language! the product e)! the +nternet Protocol *+P, address! and information

about the hard(are of the device are sent to Microsoft &he +P address is used onl)

to verif) the location of the re=uest because some editions of .indo(s such as

.indo(s / "tarter can be activated onl) (ithin certain target maret geographies

Activation "#tionsLicenses for .indo(s / and .indo(s "erver 200 12 can be obtained through one

of three basic channels: retail! original e=uipment manufacturer *<7M,! or Volume

Licensing 7ach channel has its o(n uni=ue methods of activation Decause

organi-ations can obtain their operating s)stems through an) of the three available

channels! the) can choose a combination of activation methods

Retail

.indo(s / and .indo(s "erver 200 12 products that are ac=uired through a

retail store are individuall) licensed and are activated in the same (a) as retail

versions of the .indo(s Vista and .indo(s "erver 200 operating s)stems 7ach

purchased cop) comes (ith one uni=ue product e) *printed on the product

pacaging,! (hich the user enters during the product installation &he computer

;



uses this product e) to complete the activation after the installation of the

operating s)stem is complete &his final activation step can be accomplished online

or b) telephone

"riginal $%ui#ment &anu'acturer

Most <7Ms sell s)stems that include a standard build of the .indo(s / or .indo(s

"erver 200 12 operating s)stem ard(are vendors perform <7M activation b)

associating the operating s)stem to the firm(are *basic inputEoutput s)stem! or

D+<", of the computer &his process occurs before the computer is sent to the

customer so that no additional actions are re=uired b) the user &his method of

activation is no(n as OEM activation

<7M activation is valid as long as the customer uses the <7M6provided image on as)stem &o create a customi-ed image! customers can use the image provided b)

the <7M as the basis for creating the custom image <ther(ise! a different

activation method must be used Gor further details on customi-ing .indo(s and

activation impacts refer to the follo(ing (hitepaper

ote <7M activation is applicable to computers (ith .indo(s installed that are purchased through

<7M channels

Volume !icensing

Microsoft Volume Licensing offers customi-ed programs that are tailored to the si-e

and purchasing preference of the organi-ation &hese programs provide simple!

fle3ible! and affordable solutions that enable organi-ations to easil) manage their

licenses &o become a Volume Licensing customer! the organi-ation needs to set up

a Volume License agreement (ith Microsoft

&here are t(o legal (a)s to ac=uire a full license for a ne( computer (ith a

.indo(s client operating s)stem &he first and most economical (a) is to have the

license preinstalled through the original e=uipment manufacturer &he other option

is to purchase a full) pacaged retail product

Microsoft Volume Licensing programs such as <pen License! "elect License! and

7nterprise Agreements cover onl) upgrades to .indo(s client operating s)stems

/

http://go.microsoft.com/fwlink/?LinkID=137292&clcid=0x409

http://go.microsoft.com/fwlink/?LinkID=137292&clcid=0x409



A =ualif)ing <" licensing is needed for each computer before upgrade rights

obtained through Volume Licensing can be e3ercised on these computers

Gor more information on Volume Licensing including list of =ualif)ing <"! go to

http:EEgomicrosoftcomEf(linE?Lin+dH/B0/;

ote( "ome editions of .indo(s! such as .indo(s / 7nterprise! are available onl) through the

Volume Licensing channel

Volume Activation &odels

Volume Activation allo(s volume license customers to automate the activation

process so that it is transparent to users Volume Activation applies to computers

that are covered under a Volume Licensing program +t is used strictl) as a tool for

activation! and it is not tied to license invoicing or billing

Volume Activation provides t(o models for completing volume activations: >e)

Management "ervice *>M", and Multiple Activation >e) *MA>, >M" allo(s

organi-ations to activate s)stems (ithin their net(or! and MA> activates s)stems

on a one6time basis b) using the hosted activation services provided b) Microsoft

Customers can use either or both e) t)pes to activate s)stems in their

environments

)e* &anagement Service

.ith >M"! +& pros can complete activations on their local net(or! eliminating the

need for individual computers to connect to Microsoft for product activation >M" is

a light(eight service that does not re=uire a dedicated s)stem and can easil) be co6

hosted on a s)stem that provides other services D) default! volume editions of

.indo(s / and .indo(s "erver 200 12 connect to a s)stem that hosts the >M"

service to re=uest activation $o action is re=uired from the user

>M" re=uires a minimum number of computers *ph)sical or virtual machines, in a

net(or environment &he organi-ation must have at least five computers to

activate .indo(s "erver 200 12 and at least 2 computers to activate clients that

are running .indo(s / &hese minimums are referred to as activation thresholds

http://go.microsoft.com/fwlink/?LinkId=73076




&o use >M" activation (ith .indo(s /! the computer must have the =ualif)ing <"

license *often obtained through <7Ms as part of the ne( PC purchase, and contain

a .indo(s Marer in D+<"

&ulti#le Activation )e*

MA> is used for one6time activation (ith MicrosoftIs hosted activation services

&here are t(o (a)s to activate computers using MA> &he first method is MA>

+ndependent activation! (hich re=uires that each computer independentl) connect

and be activated (ith Microsoft either over the +nternet or b) telephone &he

second method is MA> Pro3) activation .ith this method! a computer acting as a

MA> pro3) gathers activation information from multiple computers on the net(or!and then sends a centrali-ed activation re=uest on their behalf MA> Pro3)

activation is configured using the Volume Activation Management &ool *VAM&,

ote >M" is the default e) for Volume Activation clients 4sing MA> activation re=uires installing a

MA> e) Gor more information about converting >M" clients to MA>! see the Volume Activation

Deployment Guide

W+at I' S*stems Are ot Activated,

Activation is designed to provide a transparent activation e3perience for users +f

activation does not occur immediatel) after the operating s)stem is installed!

.indo(s / and .indo(s "erver 200 12 still provide the full functionalit) of the

operating s)stem for a limited amount of time! or grace period. &he length of a

grace period is B0 da)s for .indo(s / and .indo(s "erver 200 12 After the

grace period e3pires! both operating s)stems remind the user through notifications

to activate the computer

Grace Period

#uring the initial grace period! there are periodic notifications that the computer

re=uires activation <nce per da)! during the logon process! a notification appears

to remind the user to activate the operating s)stem &his continues until there are

three da)s remaining in the grace period Gor the first t(o of the final three da)s of

9







the grace period! the notification appears ever) four hours #uring the final da) of

the grace period! the notification appears ever) hour! on the hour

Grace Period $-#iration

After the initial grace period e3pires or activation fails! .indo(s / and .indo(s

"erver 200 12 continue to notif) users that the operating s)stem re=uires

activation 4ntil the operating s)stem is activated! reminders that the computer

must be activated appear in several places throughout the product:

• $otification dialogs appear during logon after user credentials entr)

• $otifications appear at the bottom of the screen above the notification area

• A persistent destop notification remains (ith a blac destop bacground

• A reminder might appear (hen users open certain .indo(s applications

Product )e*s

Volume Activation does not change ho( Volume Licensing customers obtain their

product e)s &he) can obtain MA> and >M" e)s at the Volume Licensing "ervice

Center *VL"C, .eb site at http:EEgomicrosoftcomEf(linE?Lin+dH0/FF or b)

calling an Activation Call Center "ervice Provider License Agreement *"PLA,

partners can onl) obtain e)s b) calling an Activation Call Center Customers in the4nited "tates can call 66B26/F0 +nternational customers should contact

their local support center Gor the telephone numbers of Activation Call Centers

(orld(ide! go to http:EEgomicrosoftcomEf(linE?Lin+dH0/F .hen calling a

support center! customers must have the Volume License agreement

Volume Licensing customers can log on to the VL"C .eb site at an) time to vie(

their >M" e) information &he VL"C .eb site also contains information on ho( to

re=uest and use MA>s Gor more information about MA> and >M" e)s! including

information about increasing the number of allo(ed activations! see the $-isting

Customers page at http:EEgomicrosoftcomEf(linE?Lin+dH/F00

0









Review Available Activation &odels

Volume Activation provides the follo(ing activation models:

• >e) Management "ervice *>M",

• Multiple Activation >e) *MA>,

&he model chosen depends on the si-e! net(or infrastructure! connectivit)! and

securit) re=uirements of the organi-ation +& pros can choose to use onl) one or a

combination of these activation models

ote &oen6based Activation is a speciali-ed activation option available for approved Microsoft

Volume Licensing customers +t is designed for use in specific scenarios! (here the end s)stems are

completel) disconnected from the net(or or phone &his option enables customers to use public e)infrastructure *P>+, and digital certificates *or tokens! t)picall) stored on smart cards, to activate

.indo(s / 7nterprise and .indo(s "erver 200 12 locall) (ithout contacting either customer6hosted

>M" or the Microsoft6hosted activation service using MA> Gor more information about &oen6based

Activation! contact a Microsoft Account &eam or "ervices 1epresentative

)e* &anagement Service

>M" activates computers on a local net(or! eliminating the need for individual

computers to connect to Microsoft &o do this! >M" uses a clientserver topolog)

>M" client computers can locate >M" host computers b) using #omain $ame

")stem *#$", or a static configuration >M" clients contact the >M" host b) using

remote procedure call *1PC, >M" can be hosted on computers that are running the

.indo(s Vista! .indo(s /! .indo(s "erver 200B! .indo(s "erver 200! or

.indo(s "erver 200 12! or operating s)stems

&inimum Com#uter Re%uirements

.hen planning for >M" activation! the net(or must meet or e3ceed the activation

threshold, or the minimum number of =ualif)ing computers that >M" re=uires

+& pros must also understand ho( the >M" host tracs the number of computers on

the net(or

KM Activation !hresholds

>M" can activate both ph)sical computers and virtual machines &o =ualif) for >M"

activation! a net(or must have a minimum number of =ualif)ing computers! called



the activation threshold. >M" hosts activate clients onl) after meeting this

threshold &o ensure that the activation threshold is met! a >M" host counts the

number of computers that are re=uesting activation on the net(or

&he >M" client computers are activated after meeting the activation threshold &hecomputers running .indo(s server 200 or .indo(s "erver 200 12 the activation

threshold is five Gor computers running .indo(s Vista or .indo(s / the activation

threshold is 2 &he thresholds include clients and servers that are running on

ph)sical computers or virtual machines

A >M" host responds to each valid activation re=uest from a >M" client (ith the

count of ho( man) computers have contacted the >M" host for activation Clients

that receive a count belo( their activation threshold are not activated Gor e3ample!

if the first t(o computers that contact the >M" host are running .indo(s /! the

first receives an activation count of ! and the second receives an activation count

of 2 +f the ne3t computer is a .indo(s / virtual machine! it receives an activation

count of B! and so on $one of these computers is activated! because computers

running .indo(s / must receive an activation count K2 to be activated >M"

clients in the grace state that are not activated because the activation count is too

lo( connect to the >M" host ever) t(o hours to get the current activation count

and (ill be activated (hen the threshold is met

+f the ne3t computer that contacts the >M" host is running .indo(s

"erver 200 12! it receives an activation count of F! because activation counts are

a combination of computers running .indo(s "erver 200 12 and .indo(s / +f a

computer running .indo(s "erver 200 or .indo(s "erver 200 12 receives an

activation count that is K! it is activated +f a computer running .indo(s /

receives an activation count K2! it is activated

Activation "ount "ache

&o trac the activation threshold! the >M" host eeps a record of the >M" clients

that re=uest activation &he >M" host gives each >M" client a client machine

identification *CM+#, designation! and the >M" host saves each CM+# in a table

7ach activation re=uest remains in the table for B0 da)s .hen a client rene(s its

2



activation! the cached CM+# is removed from the table! a ne( record is created!

and the B06da) period begins again +f a >M" client does not rene( its activation

(ithin B0 da)s! the >M" host removes the corresponding CM+# from the table and

reduces the activation count b) one

&he >M" host caches t(ice the number of CM+#s that >M" clients re=uire to help

ensure that the CM+# count does not drop belo( the activation threshold Gor

e3ample! on a net(or (ith clients that are running .indo(s /! the >M" activation

threshold is 2 &he >M" host caches the CM+#s of the most recent 0 activations

&he >M" activation threshold for .indo(s "erver 200 12 is five A >M" host that

is contacted onl) b) >M" clients that are running .indo(s "erver 200 12 (ould

cache the 0 most recent CM+#s +f a client that is running .indo(s / later

contacts that >M" host! >M" increases the cache si-e to 0 to accommodate the

higher threshold >M" never reduces the cache si-e

.ow )&S Wor/s

>M" activation re=uires &CPE+P connectivit) D) default! >M" hosts and clients use

#$" to publish and find the >M" service &he default settings can be used! (hich

re=uire little to no administrative action! or >M" hosts and clients can be manuall)

configured based on net(or configuration and securit) re=uirements

KM Activation #ene$al

>M" activations are valid for 0 da)s &his is called the activation validity interval.

&o remain activated! >M" clients must rene( their activation b) connecting to the

>M" host at least once ever) 0 da)s D) default! >M" client computers attempt

to rene( their activation ever) seven da)s +G >M" activation fails! the client (ill

retr) ever) t(o hours After a clientIs activation is rene(ed! the activation validit)

interval begins again

Pu%lication o& the KM ervice

&he >M" service uses service *"1V, resource records *11, in #$" to store and

communicate the locations of >M" hosts >M" hosts use #$" d)namic update

protocol! if available! to publish the >M" "1V 11s +f d)namic update is not

available or the >M" host does not have rights to publish the 11s! the #$" records

B



must be published manuall)! or +& pros must configure client computers to connect

to specific >M" hosts

ote #$" changes ma) tae time to propagate to all #$" hosts! depending on the comple3it) and

topolog) of the net(or

"lient Discovery o& the KM ervice

D) default! >M" clients =uer) #$" for >M" service information &he first time a

>M" client =ueries #$" for >M" service information! it randoml) chooses a >M"

host from the list of "1V 11s that #$" returns

&he address of a #$" server containing the "1V 11s can be listed as a suffi3ed

entr) on >M" clients! (hich allo(s advertisement of "1V 11s for >M" in one #$"

server and >M" clients (ith other primar) #$" servers to find it

Priority and $eight parameters can be added to the nsomainPublis+!ist

registr) value for >M" 7stablishing >M" host priorit) groupings and (eighting

(ithin each group allo(s +& pros to specif) (hich >M" host the clients should tr)

first and balances traffic among multiple >M" hosts <nl) .indo(s / and .indo(s

"erver 200 12 provide the priority and $eight parameters

+f the >M" host that a client selects does not respond! the >M" client removes that

>M" host from its list of "1V 11s and randoml) selects another >M" host from thelist .hen a >M" host responds! the >M" client caches the name of the >M" host

and uses it for subse=uent activation and rene(al attempts +f the cached >M" host

does not respond on a subse=uent rene(al! the >M" client discovers a ne( >M"

host b) =uer)ing #$" for >M" "1V 11s

D) default! client computers connect to the >M" host for activation b) using

anon)mous 1PCs through &CP port ; *+& pros can change the default port,

After establishing a &CP session (ith the >M" host! the client sends a single re=uest

pacet &he >M" host responds (ith the activation count +f the count meets or

e3ceeds the activation threshold for that operating s)stem! the client is activated

and the session is closed &he >M" client uses this same process for rene(al

re=uests &he communication each (a) is 20 b)tes

F



Planning a )&S e#lo*ment

&he >M" service does not re=uire a dedicated server &he >M" service can be co6

hosted (ith other services! such as Active #irector)% #omain "ervices *A# #",

domain controllers and read6onl) domain controllers *1<#Cs, >M" hosts can also

run on ph)sical computers or virtual machines that are running an) supported

.indo(s operating s)stem! including .indo(s "erver 200B Although a >M" host

that is running .indo(s "erver 200 12 can activate an) .indo(s operating

s)stem that supports Volume Activation! a >M" host that is running .indo(s / can

activate onl) computers running .indo(s / and .indo(s Vista clients A single

>M" host can support unlimited numbers of >M" clients ho(ever! Microsoft

recommends deplo)ing a minimum of t(o >M" hosts for failover Most

organi-ations can use as fe( as t(o >M" hosts for their entire infrastructure

ote >M" is not automaticall) included in .indo(s "erver 200B &o host >M" on computers that are

running .indo(s "erver 200B! do(nload and install >M" from one of the follo(ing sites:

• Gor 3;6based computers: >e) Management "ervice *3;, for .indo(s "erver 200B "P

and Later *http:EEgomicrosoftcomEf(linE?Lin+#H29;F,

• Gor 3;F6based computers: >e) Management "ervice *3;F, for .indo(s "erver 200B "P

and Later *http:EEgomicrosoftcomEf(linE?Lin+dHB0F,

Planning D' erver "on&iguration

&he default >M" auto6publishing feature re=uires "1V 11 and #$" d)namic update

protocol support >M" client default behavior and >M" "1V 11 publishing are

supported on a #$" server that is running Microsoft soft(are or an) other #$"

server that supports "1V 11s *per +nternet 7ngineering &as Gorce +7&GN 1e=uest

for Comments 1GCN 2/2, and d)namic updates *per 1GC 2B;, Gor e3ample!

Derele) +nternet #omain $ame *D+$#, versions 3 and 93 support both "1V

records and d)namic update

&he >M" host must be configured so that it has the credentials needed to create

and update "1V! A *+nternet Protocol version F! or +PvF,! and AAAA *+nternet

Protocol version ;! or +Pv;, 11s on the #$" servers! or the records need to be

created manuall) &he recommended solution for giving the >M" host the needed

credentials is to create a securit) group in A# #"! and then add all >M" hosts to







that group +n a #$" server that is running Microsoft soft(are! ensure that this

securit) group is given full control over the OVLMC"O&CP record on each #$"

domain that (ill contain the >M" "1V 11s

Activating the (irst KM )ost

>M" hosts on the net(or need to install a >M" e)! and then be activated (ith

Microsoft +nstallation of a >M" e) enables the >e) Management "ervice on the

>M" host After installing the >M" e)! complete the activation of the >M" host b)

telephone or online De)ond this initial activation! a >M" host does not

communicate an) information to Microsoft

>M" e)s are onl) installed on >M" hosts! never on individual >M" clients

.indo(s / and .indo(s "erver 200 12 have safeguards to help preventinadvertentl) installing >M" e)s on >M" client computers An) time users tr) to

install a >M" e)! the) see the (arning sho(n in Gigure

1igure Installing a )&S /e*

Activating u%se*uent KM )osts

7ach >M" e) can be installed on up to si3 >M" hosts! (hich can be ph)sical

computers or virtual machines After activating a >M" host! the same host can be

reactivated up to nine more times (ith the same e)

+f the organi-ation needs more than si3 >M" hosts! +& pros can re=uest additional

activations for the organi-ationIs >M" e) b) calling the Activation Call Center to

re=uest an e3ception Gor more information! see the Volume Licensing .eb site at

http:EEgomicrosoftcomEf(linE?Lin+#H/B0/;

;





+pgrading Eisting KM )osts

>M" hosts that are running .indo(s "erver 200B! .indo(s Vista! or .indo(s

"erver 200 can be configured to support >M" clients that are running .indo(s /

and .indo(s "erver 200 12 Gor .indo(s Vista and .indo(s "erver 200! it is

necessar) to update the >M" host (ith a pacage (ith files that support the

e3panded >M" client &his pacage is available through the Microsoft #o(nload

Center at http:EE(((microsoftcomEdo(nloads or through .indo(s 4pdate and

.indo(s "erver 4pdate "ervices *."4", <nce the pacage is installed on the >M"

host! a >M" e) that is designed to support .indo(s / and .indo(s

"erver 200 12 can be installed and activated as described earlier in this guide &he

>M" e) that supports the ne( versions of the .indo(s operating s)stems also

provides support for the previous Volume License editions of .indo(s that areacting as >M" clients

+n the case of updating a .indo(s "erver 200B >M" host! all necessar) files are

contained (ithin the >M" 2 do(nloadable pacage! (hich is available through the

Microsoft #o(nload Center at http:EE(((microsoftcomEdo(nloads

Planning KM "lients

D) default! computers that are running Volume License editions of .indo(s Vista!

.indo(s /! .indo(s "erver 200! and .indo(s "erver 200 12 are >M" clients!

and no additional configuration is needed >M" clients can locate a >M" host

automaticall) b) =uer)ing #$" for "1V 11s that publish the >M" service +f the

net(or environment does not use "1V 11s! a >M" client can be manuall)

configured to use a specific >M" host

&o manuall) configure >M" clients! follo( the steps in the Volume Activation

#eplo)ment @uide.

Activating as a tandard +ser

.indo(s / and .indo(s "erver 200 12 do not re=uire administrator privileges for

activation o(ever! this change does not allo( standard user accounts to remove

.indo(s / or .indo(s "erver 200 12 from the activated state An administrator

/

http://www.microsoft.com/downloads










account is still re=uired for other activation6 or license6related tass! such as

rearmQ

&ulti#le Activation )e*

A MA> is used for one6time activation (ith MicrosoftIs hosted activation services

7ach MA> has a predetermined number of allo(ed activations this number is based

on Volume Licensing agreements and does not match the organi-ationIs e3act

license count 7ach activation using a MA> (ith MicrosoftIs hosted activation service

counts to(ard the activation limit

&here are t(o (a)s to activate computers b) using a MA>:

• &A) Inde#endent activation3 7ach computer independentl) connect and be

activated (ith Microsoft! over the +nternet or b) telephone MA> +ndependent

activation is best suited for computers (ithin an organi-ation that do not

maintain a connection to the corporate net(or

• &A) Pro-* activation3 MA> Pro3) activation enables a centrali-ed activation

re=uest on behalf of multiple computers (ith one connection to Microsoft MA>

Pro3) activation is configured using the Volume Activation Management &ool

*VAM&, MA> Pro3) activation is appropriate for environments in (hich securit)

concerns ma) restrict direct access to the +nternet or the corporate net(or +t

is also suited for development and test labs that lac this connectivit)

MA> is recommended for computers that rarel) or never connect to the corporate

net(or and for environments in (hich the number of computers needing activation

does not meet the >M" activation threshold MA> can be used for individual

computers or (ith an image that can be duplicated or installed b) using Microsoft

deplo)ment solutions MA> can also be used on a computer that (as originall)

configured to use >M" activation &his is useful for moving a computer off the core

net(or to a disconnected environment

Volume Activation &anagement 4ool

+ncluded in the .indo(s Automated +nstallation >it *.indo(s A+>,! VAM& is a

stand6alone application that collects activation re=uests from several computers!



and then sends them to Microsoft in bul VAM& allo(s +& pros to specif) a group of

computers to activate using A# #"! (orgroup names! +P addresses! or computer

names After receiving the activation confirmation codes! VAM& distributes them to

the computers that re=uested activation Decause VAM& also stores these

confirmation codes locall)! it can reactivate a previousl) activated computer after it

is reimaged (ithout contacting Microsoft Additionall)! VAM& can be used to easil)

transition computers bet(een MA> and >M" activation methods

#o(nload the .indo(s Automated +nstallation >it *A+>, for .indo(s / 1C*http:EEgomicrosoftcomEf(linE?Lin+dHB;9/;, from the Microsoft #o(nloadCenter

&A) Arc+itecture

MA> +ndependent activation installs a MA> product e) on a client computer &he

e) instructs that computer to activate (ith Microsoft servers over the +nternet +n

MA> Pro3) activation! VAM& installs a MA> product e) on a client computer!

obtains the installation +# *++#, from the target computer! sends the ++# to

Microsoft on behalf of the client! and obtains a confirmation +# *C+#, &he tool then

activates the client b) installing the C+#

9





$valuate Client Connectivit*

7ach Volume Activation method is best suited to a particular net(or configuration

&o select the best activation method or methods for the organi-ation! assess the

net(or environment to identif) ho( different groups of computers connect to the

net(or Connectivit) to the corporate net(or! +nternet access! and the number of

computers that regularl) connect to the corporate net(or are some of the

important configuration characteristics to identif) Most medium6 to large6si-ed

organi-ations use a combination of activation methods because of the varied (a)s

their client computers connect to the net(ors

>M" is the recommended activation method for computers that are (ell connected

to the organi-ationIs core net(or or that have periodic connectivit)! such as

computers that are offsite MA> is the recommended activation method for

computers that are offsite (ith limited connectivit) or that cannot connect to the

core net(or because of securit) restrictions &hese include computers in lab and

development environments that are isolated from the core net(or

&able lists common net(or configurations and the best practice

recommendations for each configuration 7ach solution factors in the number

computers and net(or connectivit) of the activation clients

20



4able Planning Considerations b* etwor/ In'rastructure

etwor/In'rastructure

Recommendations Considerations

Core networ/

.ell6connectedlocal area

net(or *LA$,

Most commonscenario

+f total computers R >M"activation threshold:

• "mall *S00 machines,:>M" host H

• Medium *R00machines,: >M" host K

• 7nterprise: >M" host R

+f total computers T >M"activation threshold:

•

MA> *b) telephone or+nternet,

• MA> Pro3)

• Minimi-e the number of

>M" hosts• 7ach >M" host must

consistentl) maintain a

count of total machines R

>M" activation threshold

• >M" hosts are

autonomous

• >M" host is activated b)

telephone or +nternet

Isolatednetwor/

Dranch office!high6securit)

net(orsegments!perimeternet(ors

.ell6connected-oned LA$

+f ports on fire(alls can beopened bet(een >M"clients and hosts:

• 4se >M" hosts in corenet(or

+f polic) prevents fire(allmodification:

• 4se local >M" hosts inan isolated net(or

• MA> *b) telephone or+nternet,

• MA> Pro3)

• Gire(all configuration

o 1PC over &CP *&CP

port ;,

o +nitiated b) the client

• Change management on

fire(all rule sets

4est ordevelo#ment

lab

+solated net(or

+f total computers R >M"activation threshold:

• >M" host H *per

isolated net(or,

+f total computers T >M"activation threshold:

• $o activation *reset

grace period,

• MA> *b) telephone,

• MA> Pro3) performed

manuall)

• Variable configuration

• Limited number of

computers

• >M" host and MA>

activation through

telephone MA> Pro3)performed manuall)

2



etwor/In'rastructure

Recommendations Considerations

Individualdisconnected

com#uter

$o connectivit)to the +nternetor core net(or

1oamingcomputers that

periodicall)connect to the

core net(or orconnect througha virtual privatenet(or *VP$,

1oaming

computers (ith+nternet accessbut no

connection tothe corenet(or

Gor clients that connectperiodicall) to the corenet(or:

• 4se the >M" hosts in

the core net(or

Gor clients that neverconnect to the corenet(or or have no+nternet access:

• MA> *b) telephone,

Gor net(ors that cannotconnect to the core

net(or:• +f total computers R

>M" activation

threshold:

o "mall: >M" host H

o Medium: >M" host K

o 7nterprise: >M" host

R

• +f total computers T

>M" activationthreshold! MA>

+ndependent or MA>Pro3) performed

manuall)

Gor clients that neverconnect to the corenet(or but have +nternetaccess:

• MA> *b) +nternet,

• 1estricted environments

or net(ors that cannot

connect to other

net(ors

• >M" host can be

activated! moved to

disconnected net(or

• >M" host and MA>

activation b) telephone

MA> Pro3) performed

manuall)

&he follo(ing sections describe e3amples of Volume Activation solutions in

heterogeneous corporate environments that re=uire more than one activation

method 7ach scenario has a recommended activation solution! but some

22



environments ma) have infrastructure or polic) re=uirements that are best suited to

a different solution

Core etwor/

A centrali-ed >M" solution is recommended for computers on the core net(or

&his solution is for net(ors that have (ell6connected computers on multiple

net(or segments that also have a connection to the +nternet Gigure 2 sho(s a

core net(or (ith a >M" host

1igure 2 Core networ/ scenario

ote A >M" host can be installed on a virtual machine! but select a virtual machine that is unliel)

to be moved to a different host computer +f the virtual >M" host is moved to a different host

computer! the operating s)stem detects the change in the underl)ing hard(are! and the >M" host

must reactivate (ith Microsoft >M" hosts can activate (ith Microsoft up to nine times

Isolated etwor/s

Man) organi-ations have net(ors that are separated into multiple securit) -ones

"ome net(ors have a high6securit) -one that is isolated because it has sensitive

information! (hile other net(ors are separated from the core net(or because

the) are in a different ph)sical location *such as branch office locations,

2B



.ig+5Securit* 6one

)igh-security ones are net(or segments that are separated b) a fire(all that

limits communication to and from other net(ors segments +f the computers in a

high6securit) -one are allo(ed access to the core net(or b) allo(ing &CP

port ; outbound from the high6securit) -one and an 1PC repl) inbound! activate

computers in the high6securit) -one b) using >M" hosts located in the core

net(or &his (a)! the number of client computers in the high6securit) net(or

does not have to meet an) >M" activation threshold

+f these fire(all e3ceptions are not authori-ed and the number of total computers in

the high6securit) -one is sufficient to meet >M" activation thresholds! add a local

>M" host to the high6securit) -one &hen! activate the >M" host in the high6

securit) -one b) telephone

Gigure B sho(s an environment that has a corporate securit) polic) that does not

allo( traffic bet(een computers in the high6securit) -one and the core net(or

Decause the high6securit) -one has enough computers to meet the >M" activation

threshold! the high6securit) -one has its o(n local >M" host &he >M" host itself is

activated b) telephone

2F



1igure .ig+5securit* networ/ scenario

+f >M" is not appropriate because there are onl) a fe( computers in the high6

securit) -one! MA> +ndependent activation is recommended 7ach computer can be

activated independentl) (ith Microsoft b) telephone

MA> Pro3) activation b) using VAM& is also possible in this scenario Decause thecomputers in the high6securit) -one do not have +nternet access! VAM& can

discover them b) using A# #"! computer name! +P address! or membership in a

(orgroup VAM& uses .indo(s Management +nstrumentation *.M+, to install MA>

product e)s and C+#s and to retrieve status on MA> clients Decause this traffic is

not allo(ed through the fire(all! there must be a local VAM& host in the high6

securit) -one

ranc+ "''ice !ocationsGigure F sho(s an enterprise net(or that supports client computers in three

branch offices "ite A uses a local >M" host! because it has more than 2 client

computers! and it does not have secure &CPE+P connectivit) to the core net(or

"ite D uses MA> activation! because >M" does not support sites (ith fe(er than 2

>M" client computers! and the site is not connected b) a secure lin to the core

2



net(or "ite C uses >M"! because it is connected to the core net(or b) a secure

connection over a private (ide area net(or *.A$,! and activation thresholds are

met b) using core net(or >M" clients

1igure 9 ranc+ o''ice scenario

isconnected Individual Com#uters

"ome users in an organi-ation ma) be in remote locations or ma) travel to man)

locations &his scenario is common for roaming clients! such as the computers of

salespeople or other users (ho are offsite but not at branch locations &his scenario

can also appl) to remote branch office locations that have no connection or an

intermittent connection to the core net(or

#isconnected computers can use >M" or MA> depending on ho( often the

computers connect to the core net(or 4se >M" activation for computers that

connect to the core net(or'directl) or through a VP$'at least once ever) 0

da)s and (here the core net(or is using >M" activation 4se MA> +ndependent

activation'b) telephone or the +nternet'for computers that rarel) or never

2;



connect to the core net(or Gigure sho(s disconnected clients that are using

MA> +ndependent activation through the +nternet and the telephone

1igure : isconnected com#uters scenario

4est and evelo#ment !abs

Lab environments usuall) have large numbers of virtual machines! and computers

in labs are reconfigured fre=uentl) #etermine (hether the computers in test and

development labs need activation &he initial B06da) grace period of a computerthat is running .indo(s / or .indo(s "erver 200 12 can be reset three times

(ithout activating it &herefore! if )ou are rebuilding lab computers (ithin

20 da)s! these computers need not be activated

+f lab computers do re=uire activation! use >M" or MA> activation 4se >M"

activation if the computers have connectivit) to a core net(or that is using >M" +f

the number of computers in the lab meets the >M" activation threshold! deplo) a

local >M" host

+n labs that have a high turnover of computers as (ell as a small number of >M"

clients! it is important to monitor the >M" activation count to maintain a sufficient

number of cached CM+#s on the >M" host A >M" host caches activation re=uests

from computers for B0 da)s *"ee the section Minimum Computer 1e=uirementsQ

earlier in this guide for more information about ho( CM+#s affect activations, +f

2/



the lab environment needs activation but does not =ualif) for >M" activation! use

MA> activation MA> clients are activated b) telephone or over the +nternet!

(hichever is available to the lab

MA> Pro3) activation (ith VAM& can also be used in this scenario +nstall VAM& inthe isolated lab net(or and also in a net(or that has access to the +nternet +n

the isolated lab! VAM& performs discover)! obtains status! installs a MA> product

e)! and obtains the ++# of each computer in the lab &his information can then be

e3ported from VAM&! saved to removable media! and then the file can be imported

to a computer that is running VAM& and has access to the +nternet VAM& sends the

++#s to Microsoft and obtains the corresponding C+#s that are needed to complete

activation After e3porting this data to removable media! tae it to the isolated lab

to import the C+#s so that VAM& can complete the activations

ote +n igh "ecurit) mode! VAM& removes all personall) identifiable information *P++, from the file

that it e3ports &his file is a readable 73tensible Marup Language *UML, file that can be revie(ed in

an) UML or te3t editor

2



&a# Com#uters to an Activation &et+od

After evaluating the recommended activation scenarios! the ne3t step is using

Volume Activation to map computers to activation methods &he goal is to ensure

that all computers are associated (ith an activation option &able 2 provides a

simple 5ob aid that ensures that all computers are mapped to an activation method

.hen completing this 5ob aid! ensure that all computers using >M" are on net(ors

that meet >M" activation thresholds

4able 23 Activation &et+od Wor/s+eet

Criterion Activationmet+od

umber o'com#uters

&otal number of computers to be activated

$umber of computers that (ill connect to thenet(or at least once ever) 0 da)s *directl)or b) VP$, and (here the >M" activationthreshold is met

>M"

$umber of computers that do not connect tonet(or at least once ever) 0 da)s

MA>

$umber of computers in isolated net(ors(here the >M" activation threshold is met

>M"

$umber of computers in isolated net(ors

(here the >M" activation threshold is not met

MA>

$umber of computers in testEdevelopmentlabs that (ill not be activated

$one

1emaining computer count should be -ero

29



etermine Product )e* eeds

&he .indo(s / and .indo(s "erver 200 12 operating s)stems come in a variet)

of editions &o simplif) Volume Activation and the number of product e)s that an

organi-ation needs! Microsoft created product key groups Product e)s for >M"

and MA> appl) to product groups rather than individual editions ho(ever! >M" and

MA> use product e) groups differentl):

• MA> activation uses product e) groups as individual groupings Product e)s

for MA> activations are directl) associated (ith a single product group and can

onl) activate the .indo(s editions (ithin that specific product group

• .ith >M"! product e)s (or hierarchicall) (ith the product groups Product

e)s for >M" activations are associated (ith a product group and can activate

the editions (ithin that specific product group! as (ell as other editions belo( in

the product hierarch)

&he product groups for .indo(s / and .indo(s "erver 200 12 are sho(n in

&able B

4able 3 Product Grou#ings

Volume!icense#roduct /e*grou#

Windows "#erating S*stem $dition

Client VL • .indo(s / Professional

• .indo(s / 7nterprise

"erver @roup A • .indo(s "erver 200 12 PC 7dition

• .indo(s .eb "erver 200 12

"erver @roup D • .indo(s "erver 200 12 "tandard

• .indo(s "erver 200 12 7nterprise

"erver @roup C • .indo(s "erver 200 12 #atacenter

• .indo(s "erver 200 12 for +tanium6Dased ")stems

B0



C+oosing t+e &A) #roduct /e* grou#

Decause MA> a product e) group is associated (ith a single product group and can

onl) activate the editions (ithin that specific product group! choose the MA> e)

from the group that matches the .indo(s edition to be installed Gor e3ample! if

)ou are installing .indo(s / 7nterprise! install the Client VL MA> e) in the image

or directl) on the target s)stems

B



C+oosing t+e )&S )e*

.ith >M"! product e)s are associated (ith a product group and can activate the

.indo(s editions (ithin that specific product group as (ell as an) editions belo( it

in the product hierarch) &he first and least6inclusive group of the hierarch) is the

Client Volume Licensing product group "erver @roup C is the most inclusive group

in the >M" hierarch)

&his hierarch) e3tends to .indo(s Vista and .indo(s "erver 200 Volume License

editions and product e) groupings "eparate >M" e)s (ill be issued for each

product e) grouping! meaning that a customer (ill have access to a >M" e) for

Client VL for both .indo(s / and .indo(s Vista &he >M" e) for the ne(er

.indo(s products (ill also activate the previous generation! meaning that a

customer can have a single >M" e) to activate multiple editions and generations of

.indo(s &able F sho(s the correlation bet(een the product groupings

4able 93 Product Grou# Correlation

Volume !icense#roduct /e*grou#

Windows edition

;Windows 7 and WindowsServer 2008 R2<

Windows edition

;Windows Vista andWindows Server 2008<

Client VL • .indo(s / Professional


• .indo(s Vista Dusiness

• .indo(s Vista

7nterprise

"erver @roup A • .indo(s .eb

"erver 200 12

• .indo(s "erver 200 12

PC 7dition

• .indo(s PC

"erver 200 12

• .indo(s .eb

"erver 200

• .indo(s Compute

Cluster "erver 200

B2



Volume !icense#roduct /e*grou#

Windows edition

;Windows 7 and WindowsServer 2008 R2<

Windows edition

;Windows Vista andWindows Server 2008<

"erver @roup D • .indo(s "erver 200 12

"tandard


7nterprise

• .indo(s "erver 200

"tandard


7nterprise

• +ncludes editions

(ithout

)per6V

"erver @roup C • .indo(s "erver 200 12

#atacenter


for +tanium6based ")stems


#atacenter


for +tanium6Dased

")stems

• +ncludes editions

(ithout

)per6V

BB



C+oosing t+e )&S .ost

As previousl) mentioned in this guide! >M" can be hosted on a client or server

operating s)stem on a ph)sical computer or a virtual machine .hen choosing the

>M" host s)stem! consider the operating s)stem editions that (ill be activated (ith

>M" A >M" that is hosted on .indo(s / can onl) activate client operating

s)stems! but a >M" that is hosted on .indo(s "erver 200 12 can activate both

client and server computers "ee &able for an e3planation of this hierarch)

4able : )&S .ierarc+*

Product )e*grou#

)&S can be +osted on ;)&S/e* activates )&S +ost<

Windows #roducteditions activated b*t+is )&S +ost

Client VL for.indo(s /

• .indo(s Vista

• .indo(s /

• >M" for .indo(s "erver 200B

v2

• .indo(s / Professional


• .indo(s Vista Dusiness

• .indo(s Vista

7nterprise

"erver @roup Afor .indo(s"erver 200 12

• >M" for .indo(s "erver 200B

v2

• .indo(s .eb "erver 200

• .indo(s .eb "erver 200 12

• .indo(s PC "erver 200

• .indo(s PC "erver 200 12

+ncludes previous plus:

• .indo(s .eb

"erver 200 12• .indo(s .eb

"erver 200

• .indo(s PC

"erver 200 12

• .indo(s PC

"erver 200

"erver @roup Dfor .indo(s"erver 200 12



"tandard

• .indo(s "erver 200 127nterprise


"tandard


7nterprise


• .indo(s

"erver 200 12 "tandard

• .indo(s"erver 200 12

7nterprise


"tandard


7nterprise

BF



Product )e*grou#

)&S can be +osted on ;)&S/e* activates )&S +ost<

Windows #roducteditions activated b*t+is )&S +ost

"erver @roup C +ncludes previous plus:


#atacenter


#atacenter

• .indo(s "erver 200 for

+tanium6Dased ")stems


• .indo(s

"erver 200 12

#atacenter


#atacenter


for +tanium6Dased

")stems

B



etermine &onitoring and Re#orting eeds

<rgani-ations that use Volume Activation need to trac product e) usage and the

license conditions of activated computers Customers can vie( their >M" e)

information and the number of activations that remain on a MA> e) on the Volume

Licensing "ervice Center at http:EEgomicrosoftcomEf(linE?Lin+dH0/FF

Additionall)! several tools are available to help Volume Licensing customers manage

activations and product e) usage &he follo(ing sections describe the available

tools and ho( each tool helps Volume Licensing customers:

Windows &anagement Instrumentation

#ata gathered during activation is accessible b) using .M+ +n fact! several of the

tools available use .M+ to access Volume Activation data "ee the Volume

Activation &echnical 1eference @uide for a list all of .M+ methods! properties!

registr) e)s! and event +#s for Volume Activation

S*stem Center Con'iguration &anager

Customers can use Microsoft ")stems Management "erver *"M", 200B (ith "PB or

Microsoft ")stem Center Configuration Manager 200/ to monitor the license

conditions of their organi-ationIs computers Gor a detailed description of the

available license conditions! see Appendi3 D: Licensing Conditions later in this

guide

")stems Management "erver (ith "PB and ")stem Center Configuration Manager

use built6in Asset +ntelligence reporting and .M+ to generate detailed activation

reports for computers that are running .indo(s / or .indo(s "erver 200 12 &his

information can also serve as the starting point for an organi-ation to trac and

report soft(are asset management from a licensing perspective Additionall)!

")stem Center <perations Manager 200/ can be used to monitor the heath and

heartbeat for the >e) Management "ervice

B;









$vent !ogs

&he >M" service records ever) action in the application logs of >M" clients and

hosts A >M" client records activation re=uests! rene(als! and responses in the

>M" clientIs local application log using .indo(s "ecurit) Licensing *"LC, event

+#s 22 and 229 &he >M" host logs a separate entr) for each re=uest it

receives from a >M" client as "LC event +# 2290 &hese entries are saved to the

>e) Management "ervice log in the Applications and "ervices Logs folder 7ach >M"

host eeps an individual log of activations &here is no replication of logs bet(een

>M" hosts! although log for(arding can be used to replicate logs from multiple >M"

hosts to a center location for monitoring Gor more information about >M" events!

see the Volume Activation !echnical #e&erence Guide

)&S &anagement Pac/

>M" event logs can be archived and revie(ed manuall) <r (ith Microsoft ")stem

Center <perations Manager 200/! +& pros can use the .indo(s >e) Management

"ervice Management Pac for ")stem Center <perations Manager &he >M"

Management Pac can monitor the health and heartbeat of the >M" service &o

do(nload this Management Pac and guidance! see the S*stem Center Pac/

Catalog at http:EEgomicrosoftcomEf(linE?Lin+#H0BB2

Volume Activation &anagement 4ool

<rgani-ations can use VAM& to manage >M" and MA> activations on their

net(ors Additionall)! the) can use it to monitor the number of MA> activations

remaining +t reports on the license condition of all computers that are using

Volume Activation! and it tracs the MA> activation count

B/







A##endi- A( In'ormation Sent to &icroso't

Microsoft uses the information collected during activation to confirm that the cop)

of the soft(are is licensed &he information is then aggregated for statistical

anal)sis Microsoft does not use the information to identif) or contact the

organi-ation Gor more information about the information that is captured during

activation and the use of that data b) Microsoft! see

http:EEgomicrosoftcomEf(linE?Lin+#H22;http:EEgomicrosoftcomEf(linE?

Lin+dH22;

#uring MA> activation and >M" host activation! the follo(ing information is sent to

Microsoft:

• Product e)

• <perating s)stem edition and the channel from (hich it (as obtained

• Current date

• License and activation condition

• ard(are +# hash! (hich is a non6uni=ue number that cannot be reverse6

engineered

• Language settings

• +P address! (hich is used onl) for verif)ing the location of the re=uest

B





A##endi- ( !icensing Conditions

&he soft(are licensing architecture governs the licensing condition of computers

that are running .indo(s operating s)stems &his architecture has a polic) engine

built from a number of core .indo(s securit) technologies +t is designed to protect

the code and the associated licensing condition from tampering or other malicious

behavior

&he polic) engine gets data from a set of cr)ptographicall) signed eUtensible rights

Marup Language *UrML, license files UrML is an industr)6standard rights

e3pression language that a number of .indo(s components use License files

define the rights and conditions of the installed edition of .indo(s All licensing

files and other data that the polic) engine uses are digitall) signed or encr)pted b)

using e)s that are chained to secure roots of trust (ith Microsoft

B9



.indo(s / and .indo(s "erver 200 12 ma) be in one of four soft(are licensing

conditions: activated, grace, genuine, or noti&ications. &he follo(ing sections

describe these conditions! (hich reflect the status of the computerIs activation and

genuine state! (hich dictates the user e3perience Gigure ; illustrates these

conditions

1igure = !icense states

Activated

.hen a computer is activated! users can access the full functionalit) of the

operating s)stem A combination of licensing files and a set of policies *rights,

granted as a result of the activation process defines the functionalit) for a .indo(s

edition +ndividual .indo(s components call soft(are licensing application

programming interfaces *AP+s, to determine (hich rights are granted and ad5ust

their functionalit) according to the response

Grace

After installing a .indo(s / or .indo(s "erver 200 12 operating s)stem but

before activating it! users can access the full functionalit) of the operating s)stem

for a limited time *the grace period , &he length of a grace period is B0 da)s for

F0



either the client or server operating s)stem #uring this initial grace period! the

operating s)stem periodicall) notifies the user that the computer needs to be

activated Additionall)! .indo(s can fall in to out6of6tolerance grace (hen the

hard(are changes significantl) &he notifications are minimall) intrusive and ma)

not start at the beginning of the grace period! but the) increase in fre=uenc)

to(ard the end of the grace period

Genuine

&he genuine state is not associated (ith the activation process +nstead! it is a

condition determined b) the online genuine validation service .hen a user

attempts to do(nload or use a genuine6onl) feature! the online validation service

checs the operating s)stem of the re=uesting computer

An operating s)stem can have one of three genuine states:

• on5genuine &he computer has obtained a ticet from the online validation

service indicating that it is not genuine

• !ocal genuine &he computer has not obtained a validation ticet

• Genuine &he computer has a ticet that is signed b) Microsoft from the online

validation service indicating that it is genuine

&he genuine license condition applies onl) to client versions of the .indo(s

operating s)stem +nitiall)! during the grace period! a computer running these

.indo(s versions is al(a)s in a local genuine condition A computer is never

mared non6genuine until after it fails validation through the online validation

service and receives a non6genuine ticet Lie(ise! after a computer has a non6

genuine status! it must successfull) validate itself through the online validation

service to receive a genuine ticet

Although it is necessar) for a computer to be activated to be considered genuine!

the process of activation does not reset or clear a previous non6genuine status As

a result! to return a computer to a full) functional activated condition! it must be

both activated and validated against the online validation service Gor more

F



information! see Genuine &icroso't So'tware http:EEgomicrosoftcomEf(linE?

Lin+dH99B on the Microsoft .eb site

oti'ications

&he purpose of the notifications6based e3perience is to differentiate bet(een a

genuine and activated cop) of a .indo(s operating s)stem and one that is genuine

or activated in a (a) that maintains computer functionalit)! such as logon! access

to the familiar destop! and so on 1educed Gunctionalit) Mode *1GM, is not in

.indo(s / or .indo(s "erver 200 12 +nstead! both operating s)stems have a

notifications6based e3perience &his ne( notifications user e3perience means that

computers that are not activated during their grace periods *initial activations and

those that result from hard(are changes, or that fail validation ma) provide the

follo(ing user e3perience:

• After logging on to the computer! users see a dialog bo3 reminding them that

.indo(s must be activated along (ith options to activate no( or later +f users

do not interact (ith this dialog bo3 (ithin t(o minutes! the logon process

continues normall)

• +n the notifications state! .indo(s changes the destop (allpaper to a solid

blac bacground! displa)s notifications in the notification area indicating the

activation state! and displa)s dialog bo3es sho(ing actions that the user must

tae

• +n the notifications state! users have access to the full functionalit) of the

installed version of .indo(s! (ith the follo(ing features disabled:

• A computer configured as a >M" host responds to >M" client re=uests (ith

an error message that >M" has not been activated

• .indo(s 4pdate do(nloads securit) and critical updates *optional updates

are e3cluded,

• <ptional do(nloads re=uiring the online validation service'also referred to

as genuine-gated do(nloads'are not available





volume activation planning guide windows7

Documents