Move Windows 10 Enterprise KMS to Enterprise Subscription Activation

kmswindows 10

Recently, I moved a Windows 10 Home machine from factory to a Windows 10 Enterprise by using a KMS product key. It was an emergency situation as the employee was remote and we could not procure a Windows 10 Pro machine in a reasonable amount of time.

The thought process was, convert that Windows 10 Home to Enterprise using the KMS generic key, reset Windows, and let it join the domain (before the reset I added the machine to Windows Autopilot getting the hardware ID from the Get-AutoPilot PowerShell), join the Azure AD domain, auto-provision, and then use the Windows 10 Enterprise subscription license assigned to the authenticated user.

All of this happened successfully, except for the last bit. The machine is correctly joined in the Azure AD domain, I have all policies deployed to the machine, everything as expected in an Autopilot/Intune OOBE model.

However, I cannot figure out a way to remove the KMS key and let it use the Subscription Activation feature. It always fails with the error 0x8007232B (for when it cannot find a KMS server, which we don't have, I just wanted a quick way to allow the machine to have the ability to join an Azure AD domain and use our licenses).

I have tried using the command below to remove the product key and force an activation, but it failed it with another error code, and then the KMS key showed up back in the Activation settings:

slmgr.vbs /upk

Currently, Windows is sitting on an Enterprise license with a KMS key in not activate state.

How can I force this now Windows 10 Enterprise with a generic KMS key to consider the Subscription one for activation?

Best Answer

According to the offical documentation, the process should be completely automatic if the user has been assigned a proper license.

Quoting from "Scenarios":

devices that are already running Windows 10 Enterprise will migrate from KMS or MAK activated Enterprise edition to Subscription activated Enterprise edition when a Subscription Activation-enabled user signs in to the device.

What you did (changing the Windows license to Enterprise KMS and then moving to subscription activation) is also explicitly supported:

To change all of your Windows 10 Pro devices to Windows 10 Enterprise, run the following command on each computer:

cscript.exe c:\windows\system32\slmgr.vbs /ipk NPPR9-FWDCX-D2C8J-H872K-2YT43

The command causes the OS to change to Windows 10 Enterprise and then seek out the KMS server to reactivate.

So it looks like your approach is viable: but the subscription activation itself is not working.

I suggest you review and confirm the requirements:

  • Windows 10 (Pro or Enterprise) version 1703 or later installed on the devices to be upgraded.
  • Azure Active Directory (Azure AD) available for identity management.
  • Devices must be Azure AD-joined or Hybrid Azure AD joined.

Also make sure that the computer account of the device in your AD domain is correctly synced to Azure AD by ADConnect.

If it still doesn't work, the article contains detailed instructions for various scenarios; if all else fails, you'll need to open a support ticket with Microsoft.

Related Topic