{"id":12718,"date":"2020-01-21T23:39:45","date_gmt":"2020-01-21T22:39:45","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=12718"},"modified":"2021-03-18T14:07:54","modified_gmt":"2021-03-18T13:07:54","slug":"windows-7-esu-activation-in-enterprise-environment-part-3","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2020\/01\/21\/windows-7-esu-activation-in-enterprise-environment-part-3\/","title":{"rendered":"Windows 7: ESU Activation in Enterprise Environment – Part 3"},"content":{"rendered":"

\"win7\"[German<\/a>]In another blog post I would like to discuss the activation of ESU licenses for Windows 7 SP1\/Windows Server 2008\/R2 support renewal in enterprise environments. Microsoft doesn't offer a viable solution to this issue, but I have found a potentially better approach.<\/p>\n

<\/p>\n

What we are talking about?<\/h2>\n

\"\"Here in the blog, I've spent a lot of time discussing support renewals for Windows 7 SP1 (and Server 2008\/R2) as part of the Extended Security Updates (ESU) program (see links at the end of the article). Parts 1 and 2 of the article series dealt with the purchase and activation of ESU licenses for SMBs. However, the solution is only practicable for a handful of systems. In part 2<\/a> of the article series, German blog reader Shadena immediately asked<\/a> for a solution to activate ESU within large enterprise environments:<\/p>\n

interesting for me would be, how the ESU-Keys can be distributed on Windows 7 clients in large environments, if they can be set up on the domain's own KMS server.<\/p><\/blockquote>\n

I myself am not active in this field, and could only refer to the the Microsoft ESU FAQ<\/a>. And there is the Techcommunity article How to get Extended Security Updates for eligible Windows devices<\/a> from October 2019, but it doesn't reflect more than my second part of this article series. Not useful for enterprise environments with many Windows 7 systems where ESU should be activated.<\/p>\n

You could create a batch solution with a few commands, which would relieve administrators of some manual effort. In part 2 I had mentioned this post<\/a> where a script could be found (the batch program could be simplified, since the Activation-ID for all machines is fixed).<\/p>\n

ActivationWs: The ESU MAK activation solution<\/h2>\n

Recently I came across a solution how to solve the problem of activating the ESU keys in enterprise environments, if the clients or servers do not have direct access to the Internet, or where the VAMT solution described by Microsoft is not applicable. Someone has developed a solution and published it as ActivationWs on GitHub<\/a>.<\/p>\n

The ActivationWs GitHub repository is a customizable solution for the distribution and activation of multiple activation keys (MAK). It consists of an ASP.NET web service and a PowerShell script to install and activate the MAK.<\/p>\n

The developer of the solution writes that ActivationWs is designed for companies for whom deploying and activating their Extended Security Update (ESU) MAK key on many clients is a certain challenge. The ActivationWs repository offers administrators a \"pull-based\" activation solution. This eliminates the requirements of the VAMT approach mentioned above. This may reduce some of the obstacles that administrators must overcome when activating the product key.<\/p>\n

<\/a>
\n(ESU activation, Source: GitHub)<\/p>\n

The picture above shows the scheme of the activation process, including the ConfigMgr (from SCCM).<\/p>\n

    \n
  1. The PowerShell script Activate-Product.ps1<\/em> is deployed (for example, using ConfigMgr or another solution of choice) on the ESU-enabled device.<\/li>\n
  2. The script installs the MAK, and then queries the installation ID and product ID.<\/li>\n
  3. Then the script sends a SOAP request to the ActivationWs Web Service. The ActivationWs Web Service is installed on a host in the internal network of the company. The communication takes place via a freely selectable port (e.g. 80\/443).<\/li>\n
  4. The Installation- and Product IDs are transferred to the Microsoft BatchActivation Service, which then returns the Confirmation ID to the ActivationWs Web Service. This service passes the Confirmation ID to the client that is to receive the ESU Activation.<\/li>\n
  5. The script stores the Confirmation ID and completes the activation.<\/li>\n<\/ol>\n

    The ActivationWs Web Service runs on IIS and requires the .NET Framework 4.6 and access to the Microsoft BatchActivation Service (https:\/\/activation.sls.microsoft.com)<\/em>. A proxy server can be specified in the web.config file if required. Activate-Product.ps1<\/em> requires Windows PowerShell v2.0 or later and must be running with administrator privileges.<\/p>\n

    See the GitHub page for some more information and a FAQ on how to use this solution. This comes without support, but it should be the solution for some administrators.<\/p>\n

    Article series<\/strong>
    \n    Windows 7: Buy and manage ESU licenses<\/a>\u00a0\u2013 Part 1
    \n    Windows 7: Preparing for ESU and license activation<\/a>\u00a0\u2013 Part 2
    \n    Windows 7: ESU Activation inEnterprise Environment<\/a>\u00a0\u2013 Part 3
    \n    Windows 7: ESU questions and more answers<\/a>\u00a0\u2013 Part 4<\/p>\n

    Similar articles<\/strong>
    \n    Wow! Windows 7 get extended support until January 2023<\/a>
    \n    Windows 7 Extended Security Updates buyable from April 2019<\/a>
    \n    Microsoft offers Windows 7 Extended Update Support to SMBs<\/a>
    \n    Prices for Windows 7 Extended Security Updates till 2023<\/a>
    \n    Windows 7: Free Extended Update Support and usage<\/a>
    \n    Windows 7: Office 365 ProPlus Updates till 2023<\/a>
    \n    Windows 7 Extended Security Updates (ESU) requirements<\/a>
    \n    Windows 7 Extended Security Update (ESU) program available<\/a>
    \n    Windows 7 Extended Security Updates (ESU) program, price and source for SMEs<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

    [German]In another blog post I would like to discuss the activation of ESU licenses for Windows 7 SP1\/Windows Server 2008\/R2 support renewal in enterprise environments. Microsoft doesn't offer a viable solution to this issue, but I have found a potentially … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[580,2],"tags":[2195,69,195,17],"class_list":["post-12718","post","type-post","status-publish","format-standard","hentry","category-security","category-windows","tag-esu","tag-security","tag-update","tag-windows-7"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/12718","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=12718"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/12718\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=12718"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=12718"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=12718"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}