[ARCHIVED] How to get Extended Security Updates for eligible Windows devices
Published Oct 17 2019 09:00 AM 602K Views

Note:  A new version of this blog post was published on February 11, 2020.


Update 11.26.2019: Windows 7 Extended Security Updates (ESUs) will be available via the Cloud Solution Partner (CSP) program beginning Monday, December 2, 2019. To purchase Windows 7 ESUs through a CSP, please contact a CSP partner. If you are a partner and need details on procuring Windows 7 ESUs through the Partner Center, see Purchasing Windows 7 ESUs as a Cloud Solution Provider.


While many of you are well into your journey of deploying and/or servicing Windows 10, we understand that everyone is at a different point in the upgrade process. If your organization is unable to complete the transition from Windows 7 Pro or Enterprise to Windows 10—or from Windows Server 2008 and 2008 R2 Datacenter, Enterprise, or Standard to the latest version of Windows Server—prior to the end of support on January 14, 2020, we want to help you by ensuring that these devices running these select editions and versions continue to receive security updates while you complete your Windows and Windows Server upgrade projects.

In this blog, we’ll explain how volume license customers can purchase, install, and deploy Extended Security Updates today for eligible Windows 7, Windows Server 2008, and Windows Server 2008R2 devices to ensure those devices stay protected after January 14, 2020. Again, if you are a Windows 7 Pro customer looking to take advantage of paid Extended Security Updates via CSP partners, you will be able to do so once they are available on December 1, 2019. More information on this option will be available in the Windows 7 and Office 2010 End of Support FAQ.

Purchasing Windows 7 ESUs through Volume Licensing

Extended Security Updates are available through specific volume licensing programs. Coverage will be available in three consecutive 12-month increments following Windows 7 end of support on January 14, 2020. Extended Security updates are available for purchase in 12-month increments only, starting January 14, 2020. You cannot buy partial periods (e.g. 6 months).

Eligible customers can use the Azure Hybrid Benefit (available to customers with active Software Assurance or Server Subscriptions) to obtain discounts on the license of Azure virtual machines or Azure SQL Database managed instances. ESUs for select Windows Embedded products are available via your embedded device manufacturer.

Now, let’s walk through how and where to purchase Windows 7 ESU, as well as download the appropriate key from the VLSC.

  1. Visit the Volume Licensing Service Center (https://www.microsoft.com/vlsc) and sign in.
  2. Select Licenses > Relationship Summary > Licensing ID > Product Keys.

    01_ESU-in-VLSC.PNG

Purchasing Windows 7 ESUs through a Cloud Solution Provider (CSP)

To purchase Windows 7 ESUs through a CSP, customers should contact a CSP partner. If you are a partner and need details on procuring Windows 7 ESUs through the Partner Center, see Purchasing Windows 7 ESUs as a Cloud Solution Provider.

Installation prerequisites

The following steps must be completed before installing and activating ESU keys:

  1. Install the following SHA-2 code signing support update and servicing stack update (SSU) or a later SSU:

    Windows 7 SP1 and Windows Server 2008 R2 SP1:
    Servicing stack update for Windows 7 SP1 and Windows Server 2008 R2 SP1: March 12, 2019
    and
    SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: Se...
    Windows Server 2008 SP2:
    Servicing stack update for Windows Server 2008 SP2: April 9, 2019
    and
    SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: Se...

  2. Install the following SSU and monthly rollup:

    Windows 7 SP1 and Windows Server 2008 R2 SP1:
    Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: September 10, 2019 (KB4516655)

    and
    October 8, 2019: Monthly Rollup (KB4519976)

    Windows Server 2008 SP2:
    Servicing stack update for Windows Server 2008 SP2: September 10, 2019 (KB4517134) 
    and
    October 8, 2019: Monthly Rollup (KB4520002)

  3. Once activated,  continue to use your current update and servicing strategy to deploy ESU through Windows Update, Windows Server Update Services (WSUS), Microsoft Update Catalog, or whichever patch management solution you prefer.

Installation and activation

Once you have addressed the prerequisites, you’re ready to install and activate Extended Security Updates for machines connected to the internet.

First, install the ESU product key using the Windows Software Licensing Management Tool (slmgr):

Note: Installing the ESU product key will not replace the current OS activation method being used on the device. This is achieved by using the Activation ID to differentiate between the operating system’s activation and the ESU activation.

  1. Open an elevated Command Prompt.
  2. Type slmgr /ipk <ESU key> and select Enter.
  3. If the product key installed successfully, you will see a message similar to the following:

    02_ESU-product-key-installed.png

Next, find the ESU Activation ID:

  1. In the elevated Command Prompt, type slmgr /dlv and select Enter.
  2. Note the Activation ID as you will need it in the next step.

    03_ESU-activation-ID.png

Now, you’ll activate the ESU product key:

  1. Open an elevated Command Prompt.
  2. Type slmgr /ato <ESU Activation Id> and press Enter.

    04_ESU-activation-confirmed.png

    The following table outlines possible values for the <ESU Activation Id>:

    ESU Program 

    ESU SKU (or Activation) ID 

    Windows 7 SP1 (Client)

     

    Year 1 

    77db037b-95c3-48d7-a3ab-a9c6d41093e0 

    Year 2

    0e00c25d-8795-4fb7-9572-3803d91b6880 

    Year 3;

    4220f546-f522-46df-8202-4d07afd26454 

    Windows Server 2008/R2 (Server)

     

    Year 1 

    553673ed-6ddf-419c-a153-b760283472fd 

    Year 2

    04fa0286-fa74-401e-bbe9-fbfbb158010d 

    Year 3

    16c08c85-0c8b-4009-9b2b-f1f7319e45f9 

Once you have activated the ESU product key, you can verify the status at any time by following these steps:

  1. Open an elevated Command Prompt.
  2. Type slmgr /dlv and select Enter.
  3. Verify Licensed Status shows as Licensed for the corresponding ESU program, as shown below:

    05_checking-ESU-license-status.png

Note: We recommend using a management tool, such as System Center Configuration Manager, to send the slmgr scripts to your enterprise devices.

To install and activate ESU for machines that are not connected to the Internet, you will need to follow these steps:

  1. Download and install the Volume Activation Management Tool (VAMT).
  2. Download the VAMT- ESU configuration file and update your VAMT configuration file.
  3. Configure the client device’s firewall for VAMT.
  4. Add the ESU product key to VAMT.

For systems that will not connect to the internet for activation, you can use the VAMT to perform proxy activation; however, KB4519972 must first be installed.

If you use the VAMT for Activation, the tool has the ability to pick up the activation ID as shown below:

vamt-activation.png

Verifying your deployment on eligible Windows 7 SP1, Windows Server 2008 R2 SP1, and Windows Server 2008 machines for ESU

Windows 7 SP1 and Windows Server 2008 R2 SP1: Install the optional, non-security update outlined in KB4528069. Please note that the KB4528069 update has no actual security content. This update is a test package and we subsequently recommend that you deploy it in your test environment. Install this update on your on-premises devices that are eligible for ESU.

Windows Server 2008: install the optional, non-securing update outlined in KB4528081. Please note that the KB4528081 update has no actual security content. This update is a test package and we subsequently recommend that you deploy it in your test environment. Install this update on your on-premises devices that are eligible for ESU.

Azure virtual machines and Windows Server

You do not need to deploy an additional ESU key for Azure virtual machines (VMs), Windows 7 ESU with Windows Virtual Desktop, or for bring-your-own images on Azure for Windows 7, Windows Server 2008, and Windows Server 2008 R2. Like on-premises devices, these devices will also require the installation of the SSUs and monthly rollups outlined in the prerequisites section above. A pre-patched Windows 7 image and a pre-patched Windows Server 2008 R2 SP1 image are available from the Azure Marketplace. Azure Stack VMs or Azure VMware solutions should follow the same process as on-premises devices.

After installing the SSUs noted above, VMs will be enabled to download the ESU updates. 

For answers to commonly asked questions about ESU for Windows Server 2008 and 2008 R2, see the ESU FAQ.

Next steps

If your organization still has devices running Windows 7, Windows Server 2008, or Windows Server 2008 R2, we recommend that you take the steps outlined above today to take advantage of Extended Security Updates and help ensure that your devices continue to receive necessary security updates after January 14, 2020.

If you are interested in learning more about Extended Security Updates, please see the following resources:

153 Comments
Brass Contributor

“Does that mean that activation IDs are the same for everyone and that we don't have to check by using slmgr /dlv after MAK key install ?”

 

I’m noticing the same thing , so far about 38 computers at 6 different clients.

Copper Contributor
Thank you for your help @BarryHenley. I wonder why Microsoft does not make things clearer.
Copper Contributor

Hello,

 

This may have been asked but as I look I am not finding a solid answer to the questions I have.  

What is the ruling about cloned or child Virtual desktops in windows 7?  We have a few Parent WIN 7 Virtuals that when cloned we use KMS to activate the OS.  A certain number of ESU MAK were purchased in VLSC due to numbers given on tracked WIN 7 Operating Systems and that did not take into account if clones would eat through licences.  We don't track the numbers because its the usual log off and the clone is deleted. 

Now if we activate the WIN 7 parent for ESUs, is that activation going to get transferred to the clones as they are made and would the MAK instance not get "dinged" for each clone made from the ESU activated WIN 7 Parent, or would it just count for the one MAK instance that the parent has used?

Sorry if this is a duplicate to a previous answered question.

 

Thanks.

Copper Contributor

@Susan Bradley Nothing leading up to ESU release was clear, ESU only became available for Windows 7 one month before end of life date. Moving a server to the cloud or replacing a server is a huge endeavor. So for us that told clients we plan to utilize ESU, you've left them in a bad place. If Microsoft would have just said ESU will not be available for servers, we would be fine. But instead, Microsoft said it would be available, so we waited patiently just like we did for Windows 7. So to come out now and just flat out say it's not coming is bad business. It's a joke, and not offering ESU through valid channels will just lead people to get the updates in other ways that create security issues and don't make any money for Microsoft. 

Copper Contributor

hello All,

does anyone know why after installing/activating ESU on air-gapped machines license status shows unlicensed, when you check ESU status by running below commend. 

slmgr /dlv

looking forward to hear from you all.

 

thank you,

Copper Contributor

Can anyone confirm if you must upgrade SCCM to the most current version (1910), or will SCCM 1810 still be able to send ESU patches to Win7 and Server 2008R2 devices?  

 

Right now, our SCCM version is 1810 and I need to know if we need to update SCCM to 1910 in order for this ESU functionality to begin working.  Has anyone tested it with versions earlier than 1910?

Copper Contributor

Has anyone successfully used VAMT to push out these license keys?  I am able to add the key and apply it to a client but it then doesn't show the ESU separate from the OS.  When I try to activate it can only apply it to the OS and the ESU remains Unlicensed.  Running slmgr on the client shows the 2 different licenses - OS (licensed) and ESU (Unlicensed).  Cannot see ESU within VAMT to select and activate.

Copper Contributor

Hello Fellow Admin,

 

Thank you for all help and feedback! this will be my last post here, and I would like to share this important information as everyone seeking for it.

After installing and activating ESU on Offline machine, ESU License Status still shows Unlicensed. you wondering why, well the process for offline activation is a little different.

Follow below step to install and activate ESU on Air-gaped machine:

step1:

slmgr.vbs /ipk <ESU MAK KEY> hit enter.

Note: this will install ESU MAK key only.

step 2:

Cscript slmgr.vbs /dlv hit enter.

Note: write down the Activation ID and Installation ID... do not close commend prompt

step 3:

Call MS: 1-888-725-1047 and provide Installation ID. its better to separate it in groups. once the verification is done, MS will provide you with Confirmation ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx. write it down....

Note: if you are not in US, on the commend prompt type: slui 4 hit enter it will prompt you to select the county and then provide you with the phone # to call...

step 4:

on Commend Prompt Type : Slmgr /atp <Confirmation ID> space <Activation ID> hit enter.. do not close commend prompt

Note: you will see activation successful MSG. OK

step 5:

slmgr /dli hit enter

 

Now you will see ESU status: is Licensed

Good luck to everyone.

Copper Contributor
We have MAK keys for Win7 and server2008. We have a KMS that is not connected to the internet. We know how to install a key using slmgr offline and call microsoft for activation. Do I just do this for the ESU? IOW I dont need to install VAMT?
Copper Contributor

Hello!

I've got ESU activation keys for Windows7 that CANNOT connect to the internet.
According to your blog,

 

>To install and activate ESU for machines that are not connected to the Internet, you will need to follow these steps:
>1. Download and install the Volume Activation Management Tool (VAMT).

Clicking the link No 1. I can see the procedure to install VAMT into Windows 10 machine.

Install VAMT(Windows10)
https://docs.microsoft.com/en-us/windows/deployment/volume-activation/install-vamt

 

We need to install VAMT for windows7 machines to activate ESU.

Can VAMT work on Windows7 as well?
Would you please let me know resource for installing VAMT for Windows7 not 10 ?

Brass Contributor

Hello

 

We bought two ESU licenses for Windows 7 machines. Have ran the prerequisites as required. The license works on one machine but the other machine throws up the following message when adding in the ESU key:-

 

Error 0XC004F050 The software licensing service reported that the product key is invalid

 

Yet it shouldnt be invalid as we have purchased two licenses. As there are just two machines we are just using MAK activation, no VAMT tool.

 

Any help much appreciated.

Brass Contributor

discoveranother

 

i had this happen on two 32 bit copies of Windows 7. In addition to having these KB’s installed (KB4490628 -> KB4474419 -> reboot -> KB4523206) I had to run Windows Update and installed every pending update including optional update.

 

Then the ESU licensed correctly. I’ve installed ESU licenses on about 42 computers so far at about 6 different sites..

Copper Contributor

Zach, according to this you will need the Current Branch of SCCM. See link:

 

https://techcommunity.microsoft.com/t5/configuration-manager-blog/extended-security-updates-and-conf...

 

Copper Contributor

I'm having trouble activating 2008 extended support. I keep receiving the following error code when trying to activate.

 

Steps taken

slmgr /ipk "Our purchased Key"
cscript slmgr.vbs /dlv

cscript slmgr.vbs /ato 55xxx-xxx
Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.

Activating Windows(R) 7, Server-ESU-Year1 add-on for ServerDatacenter,ServerData
centerCore,ServerDatacenterV,ServerDatacenterVCore,ServerStandard,ServerStandard
Core,ServerStandardV,ServerStandardVCore,ServerEnterprise,ServerEnterpriseCore,S
erverEnterpriseV,ServerEnterpriseVCore (55xxxxx) ..
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x8
0072EFE' to display the error text.
Error: 0x80072EFE

 

We have a local KMS for server licensing and activation... Do I need to use the VAMT tools since we us KMS?  OR is something else causing the licensing problem?

 Any help would be appreciated!

 

 

Copper Contributor
I too got the message: The software licensing service reported that the product key is invalid I used the key in an email that was sent from our Microsoft representative. Does that mean they sent the wrong key? Thanks
Brass Contributor

Barry Henley

 

Thanks, I did wonder if this was the case with the PC maybe needing more updates installed. My issue is also any needed updates are throwing up update errors. The PC is not installing updates, so seems I need to figure out why.

 

Sounds like you have had a massive job on your hands like many others.

Brass Contributor

Install the following SSU and monthly rollup:

Windows 7 SP1 and Windows Server 2008 R2 SP1:
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: September 10, 2019 (KB4516655)
and
October 8, 2019: Monthly Rollup (KB4519976)

Neither of these KB's show up installed or available on any Win7 machine i have touched so far and the key is installing fine. Were these supperseeded.  Verified its Windows 7 SP1.

Brass Contributor

Justantperson, I’ve been successful in installing and activating the ESU on about 44 W7 Pro 64 bit machines with applying these 3 KB’s. Two 32 bit W7 Pro machines required every available update, including optional ones from the Windows Update utility for the ESU to activate. 


KB4490628 -> KB4474419 -> reboot -> KB4523206

Brass Contributor

Thanks Barry,  I did find the two in question were superseded so I replaced them in my script and all is good!   Thanks! 

Brass Contributor

Side Note - Download a copy of Security Essentials NOW

 

I had a client who’s Windows 10 upgrade from Windows 7 failed. I had already uninstalled Security Essentials expecting Windows Defender to be the new anti virus.

 

My go to link to reinstall Security Essentials reports it is no longer available 

 

https://support.microsoft.com/en-us/help/14210/security-essentials-download

 

I found the files still at this Microsoft page, but I don’t know for how long

 

https://www.microsoft.com/en-us/download/details.aspx?id=5201

 

Copper Contributor

Obtain the MAK CSP key via:  Partner Portal, Customers, Customer Name, Software, Product and down arrow, Get Keys

Copper Contributor

Robert1257, did you figure this out?

 

We also received this same error and it was due to system account didn't have internet access.

 

We managed to fix this by following the instructions provided here: https://beekware.nl/os-deployment/set-proxy-sccm-task-sequence/#more-164

 

Hope this helps :)

 

_e

Copper Contributor

e_morko

Yes, I installed the VAMT tools on a server that has internet access and access to the systems I needed to license and was able to license systems using the VAMT tool.   

I read your suggestion and I'm pretty sure it would have also worked.

What was frustrating is our security/firewall team could not find any drops even tho I showed them the reset in my network trace... I guess they were looking in the wrong place. 

Thank you for your response!

Copper Contributor

Hello, I was just given the task of getting ESU working on our Windows 7 computers. We have roughly 700 Win 7 machines. I am assuming the key we received has to be installed on ALL Windows 7 machines for them to continue to receive updates, correct? How do I get this installed on all of our workstations? Is there a GPO setting that can be used? Can I push a scheduled task to the machines? Since there seems to be an install step and an activation step, what is the best way to get both the installation and the activation done on multiple workstations?. Once the install and activation is done, I'm assuming WSUS will continue to install updates on these computers?

 

Thanks in advance for your help.

 

 

Copper Contributor
Windows _Web_ Server 2008 R2 and ESU-- Has microsoft intentionally excluded this Edition from working with the 2008/2008R2 ESU key? I'm able to install the key with /ipk, the one that yields an Activation-ID ending in 72fd (just like in the blog article), but activation with /ato fails ("Activation Failed.") I'm able to activate 2008, and 2008 R2 Std/Ent without issue. I wonder if they simply forgot to test with Windows Web Server 2008 R2? slmgr /dlv shows the OS key for this edition as "ServerWeb", and there's no mention of that edition in the ESU lic--ServerDatacenter, ServerStandard, and like 10 others, but no 'ServerWeb'. Microsoft reps, could you please comment?
Copper Contributor

Does anyone know what to do if you have Customers with OEM versions of Server 2008, can they get updates ( through some method) and if so how ?

 

Copper Contributor

My company buy the esu, but we have some standalone pc not connect to any network and workgroup, so I can't use vast to active the key, how can I active the key in those standalone pc

Copper Contributor

Win 7 ESU - It looks like the pre-requisites have changed ? Can somebody confirm that the monthly rollup is now required as well as latest SSU and SHA2 (as now stated above). We do not apply the monthly rollups, just the security only updates. It previously stated the latest SO update was fine. Has this changed?

Thanks in advance

Copper Contributor

Hi,

I have a question regarding prerequisite MS updates:

it says that some updates must be pre-installed on system where ESU keys are going to be applied.
For example, October 8, 2019: Monthly Rollup (KB4519976) for Windows 7 and Server 2008 r2.

Question: Is it possible to install individual October-2019 patches instead of that or is it absolutely necessary to install the monthly rollup?

thank you in advance!

Copper Contributor

Anyone had problems installing the test update for 2008 server (non R2), KB4528081, I'm getting error 80070643 ?

ESU key is installed and activated successfully, WSUS then offered the test update, however update fails to install. Tried to manually run the update but getting same issue.

No issues so far with 2008 R2 or Windows 7 activation and install of test update

 

Thanks

Copper Contributor

Has anyone been able to successfully activate the MAK key for windows 7 using the VAMT method for offline systems? on my VAMT tools it says the client is licensed but when i ran the slgmr /dli command on the windows 7 client the status returns a unlicensed status.

Microsoft

I have a customer customer face a really fundamental issue with MAK activation counts.

They have purchased 800x from CSP but in VLSC only 400x showed up, and when they try to add activation counts, Activation center did't let them, because CSP doesn't have an agreement number.

Microsoft

@Gdoc74@Eldar_g You can substitute the November 2019 security-only update or later (Nov 2019 or Dec 2019 or Jan 2020) for the October 2019 monthly rollup in the list of prerequisite updates if you are only installing the security-only updates.  You will still need the prerequisite SSU's and SHA-2 code-signing support updates, but they may already be installed.

Copper Contributor

Thank you for reply Chris. I have another question: 
 when applying  provided MAK for ESU one WIndows 7/server 2008 r2 machines, I get this error: 0xc004f050 the software licensing service reported that the product key is invalid. Could you please advise regarding it? I thought that the MAC we were given should be valid.
Although I did not install all the required updates - could it be the reason?

Microsoft

One thing I came across today, you have to use the US phone number for phone activation, when using homecountry number the product is not recognized. US number is as follows: +1 (716) 871 2781

To activate with the confirmation id use the following command:

slmgr /atp <ConfirmationID> <ActivationID>

 

This is tested and works.

 

Regards,

Bennd

Copper Contributor

Good morning Community,

 

I also have a question; I run the following script: 

 

slmgr.vbs /ipk JXYMV-*****-*****-*****-*****
slmgr.vbs /ato 553673ed-6ddf-419c-a153-************

 

Some server work for both line. Unfortunately I get the following message for the /ato line.

BxN88_1-1581347429496.png

 

But, if I run the slmgr.vbs /xpr I get the following result: 

BxN88_2-1581347480941.png

 

Does that mean that my ESU are activated properly and the slmgr.vbs /ato is not mandatory for some servers?

 

Thanks fr your help.

Microsoft

@Eldar_g For the product key is invalid message, either the prerequisite updates are not installed or the machine has not been restarted after installing the updates.

Brass Contributor

it has been about 3 weeks since my last ESU install until today. Too much material to refresh, so here are my streamlined steps


Install the 3 prerequisites if needed

KB4490628 -> KB4474419 -> reboot -> KB4523206

---------

Open an elevated Command Prompt.

Type slmgr /ipk <ESU key> and select Enter

Type slmgr /dlv and select Enter

Type slmgr /ato 77db037b-95c3-48d7-a3ab-a9c6d41093e0 and select Enter

Type slmgr /dlv and select Enter

---------

Install the ESU test update KB4528069

Copper Contributor

I'm trying to add the ESU Key into VAMT but getting message error. Anyone got this as well?

 

Capture.PNG

Copper Contributor

Alex: Did you update your VAMT to the latest version? 

 

https://www.microsoft.com/en-us/download/details.aspx?id=100304

 

Copper Contributor

Please could someone direct me to documentation whereby Windows Server 2008 VMs are hosted in a vSphere/VMWare on-premise environment. Our licencing partner has quoted us £31,000 for extended support for 3 Windows Server 2008 VMs that we have, and this seems very high. I cannot find any definitive documentation on this type of environment.

 

Thankyou for any help.

Copper Contributor

Hello,

 

I have purchased several win 7 esu keys via CSP. And some keys using in install there is the error message 0xC004F050 

 

After open the ticket in Partner Center, they just ask for using my Gold Support benefit....

Microsoft

@Queena You're likely missing a prerequisite update and restart. 

The following steps must be completed before installing and activating ESU keys:

  1. Install the following SHA-2 code signing support update and the following servicing stack update (SSU):

    Windows 7 Service Pack 1 (SP1) and Windows Server 2008 R2 SP1:
    Servicing stack update for Windows 7 SP1 and Windows Server 2008 R2 SP1: March 12, 2019 (KB4490628)
    and
    SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019 (KB4474419)

2. Reboot.

 

3. Install the SSU listed below (or a later SSU) and the ESU licensing preparation package:

Windows 7 SP1 and Windows Server 2008 R2 SP1
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: January 14, 2020 (KB4536952)
and
Extended Security Updates (ESU) Licensing Preparation Package (KB4538483)

 

4. Reboot.

5. Install and activate the key.

Copper Contributor

Hello,
Has anyone seen such error that after applying esu key on Windows server 2008 and running slmgr /dlv command, it does not show the new esu Activation ID?

Microsoft

@Eldar_g On Windows Server 2008 SP2, try "slmgr /dlv all" or "cscript slmgr /dlv all" to see the activation ID.

Copper Contributor

thank you Chris.

Copper Contributor

I have a few Windows 2008 R2 standard edition servers that are still showing unlicensed with the ESU key. All pre-requisites are showing as installed successfully. I am getting an error 0x80072EFE when running slmgr.vbs /ato and the activation ID. Any ideas?

Microsoft

@Chris1700 Error 0x80072EFE translates to ERROR_INTERNET_CONNECTION_ABORTED, The connection with the server has been terminated.  It could be a firewall or security software on that machine or the network that is terminating the connection.  If you're having to go through a proxy to get to the internet, it may need to be configured to allow the URLs to the activation servers.  Check the new post for the list: https://aka.ms/Windows7ESU. You could also try phone activation as an alternative.

Copper Contributor

Thank you! Was that link correct? I am getting a generic Windows 7 page.

Microsoft

@Chris1700 It had picked up the punctuation as part of the URL.  I fixed it and will provide the direct link below as well.

 

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/obtaining-extended-security-updates-for-e...

 

 

Version history
Last update:
‎Feb 11 2020 11:06 AM
Updated by: