How to discover Office and Windows KMS hosts and remove unauthorized instances - Microsoft 365 Apps (2024)

  • Article
  • Applies to:
    Office 2010

This article was written by Eric Ellis, Senior Support Escalation Engineer.

When you troubleshoot KMS configuration and activation issues, you may find unexpected Windows or Office KMS hosts in their environment. This article describes how to discover Office and Windows KMS hosts through DNS, and how to remove unauthorized KMS hosts.

Note

The following steps are similar in Office KMS 2010, 2013, 2016, and 2019.

Discover Office and Windows KMS hosts through DNS

By default, Windows and Office clients discover KMS hosts through DNS and a related _vlmcs SRV record. To determine whether a KMS client can locate a KMS host or whether unwanted KMS hosts exist on the network, run a command similar to the following:

nslookup -type=srv _vlmcs._tcp >%temp%\kms.txt

Review the kms.txt file, and it should contain one or more entries similar to the following:

_vlmcs._tcp.contoso.com SRV service location: priority = 0 weight = 0 port = 1688 svr hostname = kms-server.contoso.com |

Running this nslookup command frequently reveals _vlmcs SRV entries that are tied to unauthorized Windows or Office KMS hosts.

Remove unauthorized Windows KMS hosts

In many cases, Windows KMS hosts may be unintentionally set up by users who mistakenly entered a KMS host product key, instead of a Windows client product key. To resolve this issue, follow these steps on the computer(s) in question, replace the KMS product key and convert it to a KMS or MAK client:

  1. Open an elevated command prompt.

  2. Run cscript slmgr.vbs /ipk xxxxx-xxxxx-xxxxx-xxxxx-xxxxx, where xxxxx-xxxxx-xxxxx-xxxxx-xxxxx is Windows product key (there should be 25 numbers).

  3. To prevent instability in the license service, restart the system or the Software Protection Service. To restart the Software Protection Service, run the following commands:

    net stop sppsvcnet start sppsvc
  4. Run the following command to display the license information for the installed and active Windows edition:

    cscript slmgr.vbs /dli

  5. In DNS Manager, locate the appropriate forward lookup zone, and then delete the _vlmcs SRV records that exist for each computer which is not to serve as a Windows KMS host.

For more information, see the following articles:

  • Slmgr.vbs Options
  • Deploying KMS Activation

Remove unauthorized Office KMS hosts

It's not common to create an Office KMS host unintentionally, because setting up an Office KMS requires a specific product key and the installation of the Microsoft Office 2010 KMS Host License Pack.

To determine whether a computer has the Office 2010 KMS Host License Pack installed and has an active Office KMS host, run the following command:

cscript slmgr.vbs /dlv bfe7a195-4f8f-4f0b-a622-cf13c7d16864

The output of a computer which has the Office 2010 KMS Host License Pack installed resembles the following. In the following example, key items are Partial Product Key: XXXXX and License Status: Licensed. These items indicate that the Office 2010 KMS host key is successfully installed and activated. To pull all the products installed, including all Office KMS host installations, run the following command:

cscript slmgr.vbs /dlv All >C:\<path>\KMSInfo.txt

In this command, <path> equals where you want to write the output. In this file, search for Office and find all the instances for the Office KMS host installations. If you only want to pull specific Office KMS information, replace the Activation ID that is mentioned earlier in the command (bfe7a195-4f8f-4f0b-a622-cf13c7d16864) with the Activation ID for Office 2013, 2016, or 2019. An example of the output resembles the following:

Name: Microsoft Office 2010, KMSHost editionDescription: Microsoft Office 2010 KMS, VOLUME_KMS channelActivation ID: bfe7a195-4f8f-4f0b-a622-cf13c7d16864Application ID: 59a52881-a989-479d-xxxx-xxxxxxxxxxExtended PID: Installation ID: Processor Certificate URL: https://go.microsoft.com/fwlink/p/?LinkID=88342Machine Certificate URL: https://go.microsoft.com/fwlink/p/?LinkID=88343Use License URL: https://go.microsoft.com/fwlink/p/?LinkID=88345Product Key Certificate URL: https://go.microsoft.com/fwlink/p/?LinkID=88344Partial Product Key: XXXXXLicense Status: LicensedRemaining Windows rearm count: 1Trusted time:Key Management Service is enabled on this computerCurrent count: 0Listening on Port: 1688DNS publishing enabledKMS priority: Normal

Then, follow these steps to remove an Office KMS host in your environment:

  1. Open an elevated command prompt.

  2. Run the following command to uninstall Office KMS host product key:

    cscript slmgr.vbs /upk bfe7a195-4f8f-4f0b-a622-cf13c7d16864

    Warning

    If the command is run without the Office activation ID (bfe7a195-4f8f-4f0b-a622-cf13c7d16864), all installed product keys are uninstalled, including those for Windows.

  3. Run the following command again to check the status of the Office KMS host:

    cscript slmgr.vbs /dlv bfe7a195-4f8f-4f0b-a622-cf13c7d16864

  4. If the Office KMS host product key is removed, the output resembles the following. The key items are This license is not in use and License Status: Unlicensed.

    Name: Microsoft Office 2010, KMSHost editionDescription: Microsoft Office 2010 KMS, VOLUME_KMS channelActivation ID: bfe7a195-4f8f-4f0b-a622-cf13c7d16864Application ID: 59a52881-a989-479d-xxxx-xxxxxxxxxxExtended PID: Installation ID: Processor Certificate URL: https://go.microsoft.com/fwlink/?LinkID=88342Machine Certificate URL: https://go.microsoft.com/fwlink/?LinkID=88343Use License URL: https://go.microsoft.com/fwlink/?LinkID=88345Product Key Certificate URL: https://go.microsoft.com/fwlink/?LinkID=88344This license is not in use.License Status: UnlicensedRemaining Windows rearm count: 1Trusted time: 
  5. In DNS Manager, locate the appropriate forward lookup zone, and then delete the _vlmcs SRV records that exist for each computer which is not to serve as an Office KMS host.

For more information, see the following articles:

  • KMS activation of Office 2013
  • Troubleshoot volume activation for Office 2013
  • KMS Activation of Office 2016/2019
How to discover Office and Windows KMS hosts and remove unauthorized instances - Microsoft 365 Apps (2024)

FAQs

How do I remove KMS activation from Microsoft Office? ›

Open the Start menu - Settings - Apps, enter the name of the software with "KMS" or similar in the search box in the list of apps, and click the software name in the search results to uninstall it.

How do I find my Windows KMS server? ›

To find your KMS server, you can follow these steps:
  1. Open the command prompt on your computer.
  2. Type "nslookup -type=all _vlmcs. _tcp" and press Enter.
  3. Look for the "Name" and "Address" fields in the output. The "Name" field will contain the hostname of your KMS server and the "Address" field will contain its IP address.
Apr 15, 2023

How do I find my KMS host key? ›

Replies (1) 
  1. Log in to the Microsoft Volume Licensing Service Center (VLSC) website: https://www.microsoft.com/licensing/servicecenter.
  2. Click the License tab and select your license.
  3. Click the Keys tab, and then look for the KMS key.
  4. If you cannot find your KMS key in the VLSC, contact your MS reseller.
Aug 25, 2023

How do I remove a KMS host? ›

To uninstall KMS on Windows 10, you can use the following steps:
  1. Open an elevated command prompt. ...
  2. Run the following command to stop the KMS service: net stop sppsvc.
  3. Run the following command to uninstall KMS: slmgr.vbs /upk.
  4. Restart the computer for the changes to take effect.
Apr 7, 2022

How do I use KMS activator in Office 365? ›

How To Activate Microsoft Office with KMS?
  1. Step 1: Install Microsoft Office. ...
  2. Step 2: Get a KMS Host Key. ...
  3. Step 3: Set Up a KMS Host Server. ...
  4. Step 4: Configure the KMS Host. ...
  5. Step 5: Activate Office Clients. ...
  6. Step 6: Verify Activation.
Jan 14, 2024

Can I delete KMS after activation? ›

You should delete a KMS key only when you are sure that you don't need to use it anymore. If you are not sure, consider disabling the KMS key instead of deleting it. You can re-enable a disabled KMS key and cancel the scheduled deletion of a KMS key, but you cannot recover a deleted KMS key.

How do I know if Windows is activated with KMS? ›

On the KMS host, open the event log and confirm that DNS publishing is successful. The /ato command causes the operating system to attempt activation by using whichever key is installed in the operating system. The response should show the license state and detailed Windows version information.

How do I remove KMS server from DNS? ›

Select Configuration > System Settings > Key Management Server. The Key Management Server page appears and shows all key management servers that have been configured. Select the radio button for the KMS you want to remove, and select Remove.

What is the command to activate Windows Server KMS? ›

Activate a Windows Operating System (All Supported Versions)

In the elevated Command Prompt window, verify that the current directory is C:\Windows\System32. If it is not, type CD \Windows\System32 and press Enter. Type the following command: cscript slmgr. vbs /skms kms01.cit.cornell.edu and press Enter.

What is KMS master key? ›

Customer-managed Amazon KMS Customer Master Keys (CMKs) can be used to encrypt and decrypt data for multiple AWS services and resources such as S3 buckets, Redshift clusters, EBS volumes, or RDS database instances. This rule can help you with the following compliance standards: APRA.

How to get KMS key ID from Alias? ›

To find the key ID for a KMS key, see the row that begins with the KMS key alias. The Key ID column appears in the tables by default. If the Key ID column doesn't appear in your table, use the procedure described in Customizing your KMS key tables to restore it.

What are Microsoft KMS keys? ›

Key Management Service (KMS) allows organizations to activate systems within their own network. Multiple Activation Key (MAK) activates systems on a one-time basis, using Microsoft's hosted activation services.

How do I delete KMS alias immediately? ›

Delete an alias (AWS KMS API)

To delete an alias, use the DeleteAlias operation. This operation deletes one alias at a time.

How do I disable KMS key? ›

Enabling and disabling KMS keys (console)
  1. To change the AWS Region, use the Region selector in the upper-right corner of the page.
  2. In the navigation pane, choose Customer managed keys.
  3. Choose the check box for the KMS keys that you want to enable or disable.
  4. To enable a KMS key, choose Key actions, Enable.

Is KMS activation permanent? ›

The KMS only counts unique connections from the past 30 days, and only stores the 50 most recent contacts. KMS activations are valid for 180 days, a period known as the activation validity interval.

Is KMS Office activation legal? ›

Unauthorized Activation: Activating software through an unknown KMS host server may involve using unauthorized methods or tools. This can violate the terms of service set by Microsoft and may be considered as piracy or illegal activity [3].

Top Articles
Latest Posts
Article information

Author: Lilliana Bartoletti

Last Updated:

Views: 5815

Rating: 4.2 / 5 (53 voted)

Reviews: 92% of readers found this page helpful

Author information

Name: Lilliana Bartoletti

Birthday: 1999-11-18

Address: 58866 Tricia Spurs, North Melvinberg, HI 91346-3774

Phone: +50616620367928

Job: Real-Estate Liaison

Hobby: Graffiti, Astronomy, Handball, Magic, Origami, Fashion, Foreign language learning

Introduction: My name is Lilliana Bartoletti, I am a adventurous, pleasant, shiny, beautiful, handsome, zealous, tasty person who loves writing and wants to share my knowledge and understanding with you.