@setlocal DisableDelayedExpansion @echo off ::============================================================================ :: :: This script is a part of 'Microsoft Activation Scripts' (MAS) project. :: :: Homepage: massgrave.dev :: Email: windowsaddict@protonmail.com :: ::============================================================================ :: To activate, run the script with /a parameter or change 0 to 1 in below line set _acti=0 :: To activate along with KMS38 protection (from being replaced by 180 days KMS activation), :: run the script with /ap parameter or change 0 to 1 in below line set _prot=0 :: To only generate GenuineTicket.xml, run the script with /g parameter or change 0 to 1 in below line set _gent=0 :: To remove KMS38 protection, run the script with /x parameter or change 0 to 1 in below line set _unin=0 :: If value is changed in ABOVE lines or any ABOVE parameter is used then script will run in unattended mode :: Incase if more than one options are used then only one option will be applied :: To disable changing edition if current edition doesn't support HWID activation, change the value to 0 from 1 or run the script with /c parameter set _chan=1 ::======================================================================================================================================== :: Re-launch the script with x64 process if it was initiated by x86 process on x64 bit Windows :: or with ARM64 process if it was initiated by x86/ARM32 process on ARM64 Windows set "_cmdf=%~f0" for %%# in (%*) do ( if /i "%%#"=="r1" set r1=1 if /i "%%#"=="r2" set r2=1 ) if exist %SystemRoot%\Sysnative\cmd.exe if not defined r1 ( setlocal EnableDelayedExpansion start %SystemRoot%\Sysnative\cmd.exe /c ""!_cmdf!" %* r1" exit /b ) :: Re-launch the script with ARM32 process if it was initiated by x64 process on ARM64 Windows if exist %SystemRoot%\SysArm32\cmd.exe if %PROCESSOR_ARCHITECTURE%==AMD64 if not defined r2 ( setlocal EnableDelayedExpansion start %SystemRoot%\SysArm32\cmd.exe /c ""!_cmdf!" %* r2" exit /b ) :: Set Path variable, it helps if it is misconfigured in the system set "PATH=%SystemRoot%\System32;%SystemRoot%\System32\wbem;%SystemRoot%\System32\WindowsPowerShell\v1.0\" if exist "%SystemRoot%\Sysnative\reg.exe" ( set "PATH=%SystemRoot%\Sysnative;%SystemRoot%\Sysnative\wbem;%SystemRoot%\Sysnative\WindowsPowerShell\v1.0\;%PATH%" ) :: Check LF line ending pushd "%~dp0" >nul findstr /rxc:".*" "%~nx0" if not %errorlevel%==0 ( echo: echo Error: This is not a correct file. It has LF line ending issue. echo: echo Press any key to exit... pause >nul popd exit /b ) popd ::======================================================================================================================================== cls color 07 title KMS38 Activation set _args= set _elev= set _unattended=0 set _args=%* if defined _args set _args=%_args:"=% if defined _args ( for %%A in (%_args%) do ( if /i "%%A"=="/a" set _acti=1 if /i "%%A"=="/ap" set _prot=1 if /i "%%A"=="/g" set _gent=1 if /i "%%A"=="/x" set _unin=1 if /i "%%A"=="/c" set _chan=0 if /i "%%A"=="-el" set _elev=1 ) ) for %%A in (%_acti% %_prot% %_gent% %_unin%) do (if "%%A"=="1" set _unattended=1) ::======================================================================================================================================== set winbuild=1 set "nul=>nul 2>&1" set psc=powershell.exe for /f "tokens=6 delims=[]. " %%G in ('ver') do set winbuild=%%G set _NCS=1 if %winbuild% LSS 10586 set _NCS=0 if %winbuild% GEQ 10586 reg query "HKCU\Console" /v ForceV2 2>nul | find /i "0x0" 1>nul && (set _NCS=0) if %_NCS% EQU 1 ( for /F %%a in ('echo prompt $E ^| cmd') do set "esc=%%a" set "Red="41;97m"" set "Gray="100;97m"" set "Green="42;97m"" set "Magenta="45;97m"" set "_White="40;37m"" set "_Green="40;92m"" set "_Yellow="40;93m"" ) else ( set "Red="Red" "white"" set "Gray="Darkgray" "white"" set "Green="DarkGreen" "white"" set "Magenta="Darkmagenta" "white"" set "_White="Black" "Gray"" set "_Green="Black" "Green"" set "_Yellow="Black" "Yellow"" ) set _k38= set "nceline=echo: &echo ==== ERROR ==== &echo:" set "eline=echo: &call :dk_color %Red% "==== ERROR ====" &echo:" if %~z0 GEQ 500000 (set "_exitmsg=Go back") else (set "_exitmsg=Exit") set "specific_kms=SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\55c92734-d682-4d71-983e-d6ec3f16059f" ::======================================================================================================================================== if %winbuild% LSS 14393 ( %eline% echo Unsupported OS version detected. echo Project is supported for Windows 10/11/Server, build 14393 and later. goto dk_done ) for %%# in (powershell.exe) do @if "%%~$PATH:#"=="" ( %nceline% echo Unable to find powershell.exe in the system. goto dk_done ) ::======================================================================================================================================== :: Fix for the special characters limitation in path name set "_work=%~dp0" if "%_work:~-1%"=="\" set "_work=%_work:~0,-1%" set "_batf=%~f0" set "_batp=%_batf:'=''%" set _PSarg="""%~f0""" -el %_args% set "_ttemp=%temp%" setlocal EnableDelayedExpansion ::======================================================================================================================================== echo "!_batf!" | find /i "!_ttemp!" 1>nul && ( if /i not "!_work!"=="!_ttemp!" ( %eline% echo Script is launched from the temp folder, echo Most likely you are running the script directly from the archive file. echo: echo Extract the archive file and launch the script from the extracted folder. goto dk_done ) ) ::======================================================================================================================================== :: Elevate script as admin and pass arguments and preventing loop %nul% reg query HKU\S-1-5-19 || ( if not defined _elev %nul% %psc% "start cmd.exe -arg '/c \"!_PSarg:'=''!\"' -verb runas" && exit /b %eline% echo This script require administrator privileges. echo To do so, right click on this script and select 'Run as administrator'. goto dk_done ) ::======================================================================================================================================== if %_unin%==1 goto :k_uninstall :k_menu if %_unattended%==0 ( cls mode 76, 25 title KMS38 Activation echo: echo: echo: echo ____________________________________________________________ echo: echo [1] KMS38 Activation echo: echo [2] KMS38 Activation ^+ Protection echo ____________________________________________ echo: echo [3] Remove Protection echo: echo [4] %_exitmsg% echo ____________________________________________________________ echo: call :dk_color2 %_White% " " %_Green% "Enter a menu option in the Keyboard [1,2,3,4]" choice /C:1234 /N set _el=!errorlevel! if !_el!==4 exit /b if !_el!==3 goto :k_uninstall if !_el!==2 ( cls echo: call :dk_color2 %_White% " " %_Green% "KMS38 Protection:" echo: echo It stops 180 days KMS Activation from replacing KMS38 activation. echo Protection requires permission altering of a registry key. echo: echo If you are going to use KMS_VL_ALL or MAS's KMS activation for Office, echo then you don't need to enable this protection. echo For more info, check readme. echo: echo: choice /C:12 /N /M "> [1] Continue [2] Go back : " if errorlevel 2 goto :k_menu if errorlevel 1 (set _prot=1&goto :k_menu2) ) if !_el!==1 (set _prot=0&goto :k_menu2) goto :k_menu ) :k_menu2 cls mode 102, 34 if %_gent%==1 (set _title=title Generate KMS38 GenuineTicket.xml) else (set _title=title KMS38 Activation) %_title% ::======================================================================================================================================== if %_gent%==1 if exist %Systemdrive%\GenuineTicket.xml ( set _gent=0 %eline% echo File '%Systemdrive%\GenuineTicket.xml' already exist. if %_unattended%==0 ( echo: call :dk_color %_Yellow% "Press any key to go back..." pause >nul goto k_menu ) else ( goto dk_done ) ) ::======================================================================================================================================== call :dk_initial :: Check if system is permanently activated or not cls call :dk_product call :dk_checkperm if defined _perm if not %_gent%==1 ( echo ___________________________________________________________________________________________ echo: call :dk_color2 %_White% " " %Green% "Checking: %winos% is Permanently Activated." call :dk_color2 %_White% " " %Gray% "Activation is not required." echo ___________________________________________________________________________________________ if %_unattended%==1 goto dk_done echo: choice /C:12 /N /M "> [1] Activate [2] %_exitmsg% : " if errorlevel 2 exit /b ) cls ::======================================================================================================================================== :: Check Evaluation version set _eval= set _evalserv= if exist "%SystemRoot%\Servicing\Packages\Microsoft-Windows-*EvalEdition~*.mum" set _eval=1 if exist "%SystemRoot%\Servicing\Packages\Microsoft-Windows-Server*EvalEdition~*.mum" set _evalserv=1 if exist "%SystemRoot%\Servicing\Packages\Microsoft-Windows-Server*EvalCorEdition~*.mum" set _eval=1 & set _evalserv=1 if defined _eval ( reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v EditionID 2>nul | find /i "Eval" 1>nul && ( %eline% echo [%winos% ^| %winbuild%] if defined _evalserv ( echo Server Evaluation cannot be activated. Convert it to full Server OS. echo: echo Check 'Change Edition Option' in Extras section in MAS. ) else ( echo Evaluation Editions cannot be activated. Download ^& Install full version of Windows OS. echo: echo https://massgrave.dev/ ) goto dk_done ) ) ::======================================================================================================================================== :: Check SKU value / Check in multiple places to find Edition change corruption set osSKU= set regSKU= set wmiSKU= for /f "tokens=3 delims=." %%a in ('reg query "HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions" /v OSProductPfn 2^>nul') do set "regSKU=%%a" if %_wmic% EQU 1 for /f "tokens=2 delims==" %%a in ('"wmic Path Win32_OperatingSystem Get OperatingSystemSKU /format:LIST" 2^>nul') do if not errorlevel 1 set "wmiSKU=%%a" if %_wmic% EQU 0 for /f "tokens=1" %%a in ('%psc% "([WMI]'Win32_OperatingSystem=@').OperatingSystemSKU" 2^>nul') do if not errorlevel 1 set "wmiSKU=%%a" set osSKU=%wmiSKU% if not defined osSKU set osSKU=%regSKU% if not defined osSKU ( %eline% echo SKU value was not detected properly. Aborting... goto dk_done ) ::======================================================================================================================================== :: Check if GVLK (KMS key) is already installed or not set _gvlk= call :dk_channel if /i "Volume:GVLK"=="%_channel%" set _gvlk=1 ::======================================================================================================================================== :: Detect Key set key= set pkey= set altkey= set changekey= set curedition= set altedition= if defined applist call :kms38data getkey if not defined key call :dk_gvlk %nul% if defined applist if not defined key call :kms38fallback if defined altkey (set key=%altkey%&set changekey=1) ::======================================================================================================================================== if not defined key if not defined _gvlk ( %eline% %psc% $ExecutionContext.SessionState.LanguageMode 2>nul | find /i "Full" 1>nul || ( echo PowerShell is not responding properly. Aborting... goto dk_done ) if not defined applist ( echo Failed to get Key due to error in getting Activation IDs. echo: echo This error can appear when below services are not properly responding or system have other issues. echo Windows Management Instrumentation [WinMgmt], Software Protection Platform [sppsvc] echo: call :dk_color2 %Red% "Error Found In:" %_White% " %e_wmispp%" echo: echo Check troubleshooting steps in MAS Extras option. goto dk_done ) echo [%winos% ^| %winbuild% ^| SKU:%osSKU%] echo Unable to find this product in the supported product list. echo Make sure you are using updated version of the script. echo: if not "%regSKU%"=="%wmiSKU%" ( echo Difference Found In SKU Value- WMI:%wmiSKU% Reg:%regSKU% echo Restart the system and try again. goto dk_done ) goto dk_done ) ::======================================================================================================================================== :: Check files if not exist "!_work!\BIN\gatherosstate.exe" ( %eline% echo 'gatherosstate.exe' file is missing in 'BIN' folder. Aborting... goto dk_done ) :: Verify gatherosstate.exe file set _hash= for /f "skip=1 tokens=* delims=" %%# in ('certutil -hashfile "!_work!\BIN\gatherosstate.exe" SHA1^|findstr /i /v CertUtil') do set "_hash=%%#" set "_hash=%_hash: =%" if /i not "%_hash%"=="FABB5A0FC1E6A372219711152291339AF36ED0B5" ( if /i not "%_hash%"=="3FCCB9C359EDB9527C9F5688683F8B3C5910E75D" ( %eline% echo gatherosstate.exe SHA1 hash mismatch found. echo: echo Detected: %_hash% goto dk_done ) ) ::======================================================================================================================================== :: Check clipup.exe for the detection and activation of server cor and acor editions set a_cor= if exist "%SystemRoot%\Servicing\Packages\Microsoft-Windows-Server*CorEdition~*.mum" if not exist "%systemroot%\System32\clipup.exe" set a_cor=1 if defined a_cor ( if not exist "!_work!\BIN\clipup.exe" ( %eline% echo 'ClipUp.exe' file is not found in 'BIN' folder. goto dk_done ) ) ::======================================================================================================================================== set error= set activ= cls echo: for /f "skip=2 tokens=2*" %%a in ('reg query "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /v PROCESSOR_ARCHITECTURE') do set arch=%%b echo Checking OS Info [%winos% ^| %winbuild% ^| %arch%] ::======================================================================================================================================== set "_serv=ClipSVC sppsvc Winmgmt" :: Client License Service (ClipSVC) :: Software Protection :: Windows Management Instrumentation :: Check disabled services set serv_ste= for %%# in (%_serv%) do ( set serv_dis= reg query HKLM\SYSTEM\CurrentControlSet\Services\%%# /v Start %nul% || set serv_dis=1 for /f "skip=2 tokens=2*" %%a in ('reg query HKLM\SYSTEM\CurrentControlSet\Services\%%# /v Start 2^>nul') do if /i %%b equ 0x4 set serv_dis=1 if defined serv_dis (if defined serv_ste (set "serv_ste=!serv_ste! %%#") else (set "serv_ste=%%#")) ) :: Change disabled services startup type to default set serv_csts= set serv_cste= if defined serv_ste ( for %%# in (%serv_ste%) do ( if /i %%#==ClipSVC sc config %%# start= demand %nul% if /i %%#==sppsvc sc config %%# start= delayed-auto %nul% if /i %%#==Winmgmt sc config %%# start= auto %nul% if !errorlevel!==0 ( if defined serv_csts (set "serv_csts=!serv_csts! %%#") else (set "serv_csts=%%#") ) else ( set error=1 if defined serv_cste (set "serv_cste=!serv_cste! %%#") else (set "serv_cste=%%#") ) ) ) if defined serv_csts echo Enabling Disabled Services [Successful] [%serv_csts%] if defined serv_cste call :dk_color %Red% "Enabling Disabled Services [Failed] [%serv_cste%]" if not "%regSKU%"=="%wmiSKU%" ( set error=1 call :dk_color %Red% "Checking WMI/REG SKU [Difference Found - WMI:%wmiSKU% Reg:%regSKU%] [Restart System]" ) ::======================================================================================================================================== :: Install key echo: if defined changekey ( call :dk_color %Magenta% "[%altedition%] Edition product key will be used to enable KMS38 activation." echo: ) set _partial= if not defined key ( if %_wmic% EQU 1 for /f "tokens=2 delims==" %%# in ('wmic path SoftwareLicensingProduct where "ApplicationID='55c92734-d682-4d71-983e-d6ec3f16059f' and PartialProductKey<>null" Get PartialProductKey /value 2^>nul') do set "_partial=%%#" if %_wmic% EQU 0 for /f "tokens=2 delims==" %%# in ('%psc% "(([WMISEARCHER]'SELECT PartialProductKey FROM SoftwareLicensingProduct WHERE ApplicationID=''55c92734-d682-4d71-983e-d6ec3f16059f'' AND PartialProductKey IS NOT NULL').Get()).PartialProductKey | %% {echo ('PartialProductKey='+$_)}" 2^>nul') do set "_partial=%%#" call echo Checking Installed Product Key [Partial Key - %%_partial%%] [Volume:GVLK] ) set error_code= if defined key ( if %_wmic% EQU 1 wmic path SoftwareLicensingService where __CLASS='SoftwareLicensingService' call InstallProductKey ProductKey="%key%" %nul% if %_wmic% EQU 0 %psc% "(([WMISEARCHER]'SELECT Version FROM SoftwareLicensingService').Get()).InstallProductKey('%key%')" %nul% if not !errorlevel!==0 cscript //nologo %windir%\system32\slmgr.vbs /ipk %key% %nul% set error_code=!errorlevel! cmd /c exit /b !error_code! if !error_code! NEQ 0 set "error_code=[0x!=ExitCode!]" if !error_code! EQU 0 ( call :dk_refresh echo Installing KMS Client Setup Key [%key%] [Successful] ) else ( call :dk_color %Red% "Installing KMS Client Setup Key [%key%] [Failed] !error_code!" ) ) ::======================================================================================================================================== :: Check activation ID for setting specific KMS host set app= if %_wmic% EQU 1 for /f "tokens=2 delims==" %%a in ('"wmic path SoftwareLicensingProduct where (ApplicationID='55c92734-d682-4d71-983e-d6ec3f16059f' and Description like '%%KMSCLIENT%%' and PartialProductKey is not NULL) get ID /VALUE" 2^>nul') do call set "app=%%a" if %_wmic% EQU 0 for /f "tokens=2 delims==" %%a in ('%psc% "(([WMISEARCHER]'SELECT ID FROM SoftwareLicensingProduct WHERE ApplicationID=''55c92734-d682-4d71-983e-d6ec3f16059f'' AND Description like ''%%KMSCLIENT%%'' AND PartialProductKey IS NOT NULL').Get()).ID | %% {echo ('ID='+$_)}" 2^>nul') do call set "app=%%a" if not defined app ( call :dk_color %Red% "Checking Activation ID [Failed]" ) ::======================================================================================================================================== :: Set specific KMS host to Local Host :: By doing this, global KMS IP can not replace KMS38 activation but can be used with Office and other Windows Editions set regadd= set k_error= if not %_gent%==1 if defined app ( echo: set regadd=1 %nul% reg delete "HKLM\%specific_kms%" /f %nul% reg delete "HKU\S-1-5-20\%specific_kms%" /f %nul% reg query "HKLM\%specific_kms%" && ( call :regown "HKLM\%specific_kms%" %nul% reg delete "HKLM\%specific_kms%" /f ) %nul% reg add "HKLM\%specific_kms%\%app%" /f /v KeyManagementServiceName /t REG_SZ /d "127.0.0.2" || set k_error=1 %nul% reg add "HKLM\%specific_kms%\%app%" /f /v KeyManagementServicePort /t REG_SZ /d "1688" || set k_error=1 if not defined k_error ( echo Adding Specific KMS Host [LocalHost 127.0.0.2] [Successful] ) else ( call :dk_color %Red% "Adding Specific KMS Host [LocalHost 127.0.0.2] [Failed]" ) ) if not %_gent%==1 if not defined app ( call :dk_color %Red% "Adding Specific KMS Host [Skipped] [Activation ID Not Found]" ) ::======================================================================================================================================== :: Files are copied to temp to generate ticket to avoid possible issues in case the path contains special character or non English names echo: set "temp_=%SystemRoot%\Temp\_Temp" set "_clipup=%systemroot%\System32\clipup.exe" if exist "%temp_%\.*" rmdir /s /q "%temp_%\" %nul% md "%temp_%\" %nul% pushd "!_work!\BIN\" copy /y /b "gatherosstate.exe" "%temp_%\gatherosstate.exe" %nul% if defined a_cor copy /y /b "ClipUp.exe" "%_clipup%" %nul% popd if not exist "%temp_%\gatherosstate.exe" ( call :dk_color %Red% "Copying Required Files to Temp [%temp_%] [Failed]" goto :k_final ) else ( echo Copying Required Files to Temp [%temp_%] [Successful] ) if defined a_cor ( if exist "%_clipup%" ( echo Copying clipup.exe File to [%systemroot%\System32\] [Successful] ) else ( call :dk_color %Red% "Copying clipup.exe File to [%systemroot%\System32\] [Failed] Aborting..." goto :k_final ) ) ::======================================================================================================================================== if /i "%_hash%"=="3FCCB9C359EDB9527C9F5688683F8B3C5910E75D" ( echo Checking gatherosstate.exe [Already Modified] %nul% ren "%temp_%\gatherosstate.exe" "gatherosstatemodified.exe" goto :kskipmod ) :: Modify gatherosstate.exe pushd "%temp_%\" %nul% %psc% "$f=[io.file]::ReadAllText('!_batp!') -split ':hex\:.*';iex ($f[1]);" popd if not exist "%temp_%\gatherosstatemodified.exe" ( call :dk_color %Red% "Creating Modified Gatherosstate [Failed] Aborting..." goto :k_final ) set _hash= for /f "skip=1 tokens=* delims=" %%# in ('certutil -hashfile "%temp_%\gatherosstatemodified.exe" SHA1^|findstr /i /v CertUtil') do set "_hash=%%#" set "_hash=%_hash: =%" if /i not "%_hash%"=="3FCCB9C359EDB9527C9F5688683F8B3C5910E75D" ( call :dk_color %Red% "Creating Modified Gatherosstate [Failed] [Hash Not Matched] Aborting..." goto :k_final ) else ( echo Creating Modified Gatherosstate [Successful] ) :kskipmod ::======================================================================================================================================== :: Multiple attempts to generate the ticket because in some cases, one attempt is not enough. set "_noxml=if not exist "%temp_%\GenuineTicket.xml"" "%temp_%/gatherosstatemodified.exe" GVLKExp=2038-01-19T03:14:07Z;DownlevelGenuineState=1 %_noxml% timeout /t 3 %nul% %_noxml% net stop sppsvc /y %nul% %_noxml% call "%temp_%/gatherosstatemodified.exe" GVLKExp=2038-01-19T03:14:07Z;DownlevelGenuineState=1 %_noxml% timeout /t 3 %nul% %_noxml% ( call :dk_color %Red% "Generating GenuineTicket.xml [Failed] Aborting..." goto :k_final ) else ( echo Generating GenuineTicket.xml [Successful] ) ::======================================================================================================================================== :: Copy GenuineTicket.xml to the root of C drive and exit if ticket generation option was used in script if %_gent%==1 ( echo: copy /y /b "%temp_%\GenuineTicket.xml" "%Systemdrive%\GenuineTicket.xml" %nul% if not exist "%Systemdrive%\GenuineTicket.xml" ( call :dk_color %Red% "Copying GenuineTicket.xml to %Systemdrive%\ [Failed]" ) else ( call :dk_color %Green% "Copying GenuineTicket.xml to %Systemdrive%\ [Successful]" ) goto :k_final ) ::======================================================================================================================================== :: clipup -v -o -altto & clipup -v -o both methods may fail if the username have spaces/special characters/non English names :: Most correct way to apply a ticket is by restarting ClipSVC service but we can not check the log details in this way :: To get the log details and also to correctly apply ticket, script will install tickets two times (service restart + clipup -v -o -altto ) set "tdir=%ProgramData%\Microsoft\Windows\ClipSVC\GenuineTicket" if exist "%tdir%\*.xml" del /f /q "%tdir%\*.xml" %nul% if not exist "%tdir%\" md "%tdir%\" %nul% copy /y /b "%temp_%\GenuineTicket.xml" "%tdir%\GenuineTicket.xml" %nul% if not exist "%tdir%\GenuineTicket.xml" ( call :dk_color %Red% "Copying Ticket to ClipSVC Location [Failed]" ) set "_xmlexist=if exist "%tdir%\GenuineTicket.xml"" net stop sppsvc /y %nul% || net stop sppsvc /y %nul% sc stop sppsvc %nul% clipup -v -o -altto %temp_%\ %_xmlexist% ( net stop ClipSVC /y %nul% net start ClipSVC /y %nul% %_xmlexist% timeout /t 2 %nul% %_xmlexist% timeout /t 2 %nul% %_xmlexist% ( if exist "%tdir%\*.xml" del /f /q "%tdir%\*.xml" %nul% call :dk_color %Red% "Installing GenuineTicket.xml [Failed With ClipSVC Service Restart Method]" ) ) ::========================================================================================================================================== call :dk_product echo: echo Activating... echo: call :k_checkexp if defined _k38 ( set activ=1 call :k_actinfo goto :k_final ) :: Clear 180 Days KMS Activation lock with Windows SKU specific rearm and without the need to restart the system if %_wmic% EQU 1 wmic path SoftwareLicensingProduct where ID='%app%' call ReArmsku %nul% if %_wmic% EQU 0 %psc% "$null=([WMI]'SoftwareLicensingProduct=''%app%''').ReArmsku()" %nul% if %errorlevel%==0 ( echo Applying SKU-ID Rearm [Successful] ) else ( call :dk_color %Red% "Applying SKU-ID Rearm [Failed]" ) echo: call :k_checkexp if defined _k38 ( set activ=1 call :k_actinfo goto :k_final ) :: Restart software protection service to refresh itself and run refresh license status and activation commands net stop sppsvc /y %nul% net start sppsvc /y %nul% call :dk_refresh call :dk_act call :k_checkexp if defined _k38 ( set activ=1 call :k_actinfo goto :k_final ) call :dk_color %Red% "Activation Failed" call :dk_color %Magenta% "Restart the system and try again / Check troubleshooting steps in MAS Extras option" ::======================================================================================================================================== :k_final :: Remove the added Specific KMS Host (Local Host) if activation is not completed echo: set k_error= if defined regadd if not defined _k38 ( %nul% reg delete "HKLM\%specific_kms%" /f %nul% reg delete "HKU\S-1-5-20\%specific_kms%" /f %nul% reg query "HKLM\%specific_kms%" && set k_error=1 %nul% reg query "HKU\S-1-5-20\%specific_kms%" && set k_error=1 if not defined k_error ( echo Removing The Added Specific KMS Host [Successful] ) else ( call :dk_color %Red% "Removing The Added Specific KMS Host [Failed]" ) ) :: Protect KMS38 if opted by the user and conditions are correct if defined regadd if defined _k38 if %_prot%==1 ( %nul% call :regown "HKLM\%specific_kms%" "" S-1-5-32-544 "" Deny "SetValue,Delete" %nul% reg delete "HKLM\%specific_kms%" /f %nul% reg query "HKLM\%specific_kms%" && ( call :dk_color %Gray% "Locking a Registry To Protect KMS38 [Successful]" ) || ( call :dk_color %Red% "Locking a Registry To Protect KMS38 [Failed]" ) ) :: clipup.exe does not exist in server cor and acor editions by default, it was copied there with this script if exist "%temp_%\.*" rmdir /s /q "%temp_%\" %nul% if defined a_cor if exist "%_clipup%" del /f /q "%_clipup%" %nul% if exist "%temp_%\" ( call :dk_color %Red% "Cleaning Temp Files [Failed]" ) else ( echo Cleaning Temp Files [Successful] ) if defined a_cor ( if exist "%_clipup%" ( call :dk_color %Red% "Deleting copied clipup.exe file [Failed]" ) else ( echo Deleting copied clipup.exe file [Successful] ) ) if %osSKU%==175 ( call :dk_color %Red% "ServerRdsh Editon does not officially support activation on non-azure platforms." ) if not defined activ call :dk_checkerrors if not defined activ if not defined error ( echo Basic Diagnostic Tests [Error Not Found] ) goto :dk_done ::======================================================================================================================================== :k_uninstall cls mode 99, 28 title Remove KMS38 Protection set "RegKey=HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ClipSVC\Volatile\PersistedSystemState" set "_ident=HKU\S-1-5-19\SOFTWARE\Microsoft\IdentityCRL" echo: call :dk_ckeckwmic call :k_checkexp :: It's better to not clean ClipSVC hence its skipped REM if defined _k38 ( REM for %%# in (ClipSVC) do ( REM sc query %%# | find /i "STOPPED" %nul% || net stop %%# /y %nul% REM sc query %%# | find /i "STOPPED" %nul% || sc stop %%# %nul% REM ) REM REM Thanks to @mspaintmsi for informing this command info REM rundll32 clipc.dll,ClipCleanUpState REM if exist "%ProgramData%\Microsoft\Windows\ClipSVC\tokens.dat" ( REM call :dk_color %Red% "Cleaning ClipSVC Licences [Failed]" REM ) else ( REM echo Cleaning ClipSVC Licences [Successful] REM ) REM REM Below registry key (Volatile & Protected) gets created after the ClipSVC License cleanup command, and gets automatically deleted after REM REM system restart. It needs to be deleted to activate the system without restart. REM call :regown "%RegKey%" %nul% REM reg delete "%RegKey%" /f %nul% REM reg query "%RegKey%" %nul% && ( REM call :dk_color %Red% "Deleting a Volatile Registry [Failed]" REM call :dk_color %Magenta% "Restart the system, that will delete this registry key automatically" REM ) || ( REM echo Deleting a Volatile Registry [Successful] REM ) REM REM Clear HWID token related registry to fix activation incase if there is any corruption REM reg delete "%_ident%" /f %nul% REM reg query "%_ident%" %nul% && ( REM call :dk_color %Red% "Deleting a Registry [Failed] [%_ident%]" REM ) || ( REM echo Deleting a Registry [Successful] [%_ident%] REM ) REM for %%# in (ClipSVC wlidsvc LicenseManager sppsvc) do (net stop %%# /y %nul% & net start %%# /y %nul%) REM call :dk_refresh REM ) set exist_= %nul% reg query "HKLM\%specific_kms%" && ( set exist_=1 %nul% reg delete "HKLM\%specific_kms%" /f ) %nul% reg delete "HKU\S-1-5-20\%specific_kms%" /f %nul% reg query "HKLM\%specific_kms%" && ( %nul% call :regown "HKLM\%specific_kms%" %nul% reg delete "HKLM\%specific_kms%" /f ) %nul% reg query "HKLM\%specific_kms%" && ( call :dk_color %Red% "Removing Specific KMS Host [Failed]" ) || ( if defined exist_ ( echo Removing Specific KMS Host [Successful] ) else ( echo Removing Specific KMS Host [Already Removed] ) ) goto :dk_done ::======================================================================================================================================== :: A lean and mean snippet to set registry ownership and permission recursively :: Written by @AveYo aka @BAU :: pastebin.com/XTPt0JSC :: Modified by @abbodi1406 to make it work in ARM64 Windows 10 (builds older than 21277) where only x86 version of Powershell is installed. :: This code runs only if KMS38 protection option or complete uninstall option is used by the user in this script. :regown pushd "!_work!" setlocal DisableDelayedExpansion set "0=%~nx0"&%psc% $A='%~1','%~2','%~3','%~4','%~5','%~6';iex(([io.file]::ReadAllText($env:0)-split':Own1\:.*')[1])&popd&setlocal EnableDelayedExpansion&exit/b:Own1: $D1=[uri].module.gettype('System.Diagnostics.Process')."GetM`ethods"(42) |where {$_.Name -eq 'SetPrivilege'} #`:no-ev-warn 'SeSecurityPrivilege','SeTakeOwnershipPrivilege','SeBackupPrivilege','SeRestorePrivilege'|foreach {$D1.Invoke($null, @("$_",2))} $path=$A[0]; $rk=$path-split'\\',2; switch -regex ($rk[0]){'[mM]'{$hv=2147483650};'[uU]'{$hv=2147483649};default{$hv=2147483648};} $HK=[Microsoft.Win32.RegistryKey]::OpenBaseKey($hv, 256); $s=$A[1]; $sps=[Security.Principal.SecurityIdentifier] $u=($A[2],'S-1-5-32-544')[!$A[2]];$o=($A[3],$u)[!$A[3]];$w=$u,$o |% {new-object $sps($_)}; $old=!$A[3];$own=!$old; $y=$s-eq'all' $rar=new-object Security.AccessControl.RegistryAccessRule( $w[0], ($A[5],'FullControl')[!$A[5]], 1, 0, ($A[4],'Allow')[!$A[4]] ) $x=$s-eq'none';function Own1($k){$t=$HK.OpenSubKey($k,2,'TakeOwnership');if($t){0,4|%{try{$o=$t.GetAccessControl($_)}catch{$old=0} };if($old){$own=1;$w[1]=$o.GetOwner($sps)};$o.SetOwner($w[0]);$t.SetAccessControl($o); $c=$HK.OpenSubKey($k,2,'ChangePermissions') $p=$c.GetAccessControl(2);if($y){$p.SetAccessRuleProtection(1,1)};$p.ResetAccessRule($rar);if($x){$p.RemoveAccessRuleAll($rar)} $c.SetAccessControl($p);if($own){$o.SetOwner($w[1]);$t.SetAccessControl($o)};if($s){$($subkeys=$HK.OpenSubKey($k).GetSubKeyNames()) 2>$null; foreach($n in $subkeys){Own1 "$k\$n"}}}};Own1 $rk[1];if($env:VO){get-acl Registry::$path|fl} #:Own1: lean & mean snippet by AveYo ::======================================================================================================================================== :: Check KMS activation status :k_actinfo set xpr= for /f "tokens=* delims=" %%# in ('%psc% "$([DateTime]::Now.addMinutes(%gpr%)).ToString('yyyy-MM-dd HH:mm:ss')" 2^>nul') do set "xpr=%%#" call :dk_color %Green% "%winos% is activated till !xpr!" exit /b :: Check remaining KMS activation grace period :k_checkexp set gpr=0 if %_wmic% EQU 1 for /f "tokens=2 delims==" %%# in ('"wmic path SoftwareLicensingProduct where (ApplicationID='55c92734-d682-4d71-983e-d6ec3f16059f' and Description like '%%KMSCLIENT%%' and PartialProductKey is not NULL) get GracePeriodRemaining /VALUE" 2^>nul') do set "gpr=%%#" if %_wmic% EQU 0 for /f "tokens=2 delims==" %%# in ('%psc% "(([WMISEARCHER]'SELECT GracePeriodRemaining FROM SoftwareLicensingProduct WHERE ApplicationID=''55c92734-d682-4d71-983e-d6ec3f16059f'' AND Description like ''%%KMSCLIENT%%'' AND PartialProductKey IS NOT NULL').Get()).GracePeriodRemaining | %% {echo ('GracePeriodRemaining='+$_)}" 2^>nul') do set "gpr=%%#" if %gpr% GTR 259200 (set _k38=1) else (set _k38=) exit /b :: Get Windows permanent activation status :dk_checkperm if %_wmic% EQU 1 wmic path SoftwareLicensingProduct where (LicenseStatus='1' and GracePeriodRemaining='0' and PartialProductKey is not NULL) get Name /value 2>nul | findstr /i "Windows" 1>nul && set _perm=1||set _perm= if %_wmic% EQU 0 %psc% "(([WMISEARCHER]'SELECT Name FROM SoftwareLicensingProduct WHERE LicenseStatus=1 AND GracePeriodRemaining=0 AND PartialProductKey IS NOT NULL').Get()).Name | %% {echo ('Name='+$_)}" 2>nul | findstr /i "Windows" 1>nul && set _perm=1||set _perm= exit /b :: Refresh license status :dk_refresh if %_wmic% EQU 1 wmic path SoftwareLicensingService where __CLASS='SoftwareLicensingService' call RefreshLicenseStatus %nul% if %_wmic% EQU 0 %psc% "$null=(([WMICLASS]'SoftwareLicensingService').GetInstances()).RefreshLicenseStatus()" %nul% exit /b :: Get Windows installed key channel :dk_channel if %_wmic% EQU 1 for /f "tokens=2 delims==" %%# in ('wmic path SoftwareLicensingProduct where "ApplicationID='55c92734-d682-4d71-983e-d6ec3f16059f' and PartialProductKey<>null" Get ProductKeyChannel /value 2^>nul') do set "_channel=%%#" if %_wmic% EQU 0 for /f "tokens=2 delims==" %%# in ('%psc% "(([WMISEARCHER]'SELECT ProductKeyChannel FROM SoftwareLicensingProduct WHERE ApplicationID=''55c92734-d682-4d71-983e-d6ec3f16059f'' AND PartialProductKey IS NOT NULL').Get()).ProductKeyChannel | %% {echo ('ProductKeyChannel='+$_)}" 2^>nul') do set "_channel=%%#" exit /b :: Activation command :dk_act if %_wmic% EQU 1 wmic path SoftwareLicensingProduct where "ApplicationID='55c92734-d682-4d71-983e-d6ec3f16059f' and PartialProductKey<>null" call Activate %nul% if %_wmic% EQU 0 %psc% "(([WMISEARCHER]'SELECT ID FROM SoftwareLicensingProduct WHERE ApplicationID=''55c92734-d682-4d71-983e-d6ec3f16059f'' AND PartialProductKey IS NOT NULL').Get()).Activate()" %nul% exit /b :: Get Windows Activation IDs :dk_actids set applist= if %_wmic% EQU 1 set "chkapp=for /f "tokens=2 delims==" %%a in ('"wmic path SoftwareLicensingProduct where (ApplicationID='55c92734-d682-4d71-983e-d6ec3f16059f') get ID /VALUE" 2^>nul')" if %_wmic% EQU 0 set "chkapp=for /f "tokens=2 delims==" %%a in ('%psc% "(([WMISEARCHER]'SELECT ID FROM SoftwareLicensingProduct WHERE ApplicationID=''55c92734-d682-4d71-983e-d6ec3f16059f''').Get()).ID ^| %% {echo ('ID='+$_)}" 2^>nul')" %chkapp% do (if defined applist (call set "applist=!applist! %%a") else (call set "applist=%%a")) exit /b :: Get Product name (WMI/REG methods are not reliable in all conditions, hence winbrand.dll method is used) :dk_product set winos= set d1=[DllImport(\"winbrand\",CharSet=CharSet.Unicode)]public static extern string BrandingFormatString(string s); set d2=$AP=Add-Type -Member '%d1%' -Name D1 -PassThru; $AP::BrandingFormatString('%%WINDOWS_LONG%%') for /f "delims=" %%s in ('"%psc% %d2%"') do if not errorlevel 1 (set winos=%%s) echo "%winos%" | find /i "Windows" 1>nul || ( for /f "skip=2 tokens=2*" %%a in ('reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v ProductName 2^>nul') do set "winos=%%b" if %winbuild% GEQ 22000 ( set winos=!winos:Windows 10=Windows 11! ) ) exit /b :: Check wmic.exe :dk_ckeckwmic set _wmic=0 for %%# in (wmic.exe) do @if not "%%~$PATH:#"=="" ( wmic path Win32_ComputerSystem get CreationClassName /value 2>nul | find /i "computersystem" 1>nul && set _wmic=1 ) exit /b :dk_initial echo: echo Initializing... :: Check and enable WinMgmt, sppsvc services if required for %%# in (WinMgmt sppsvc) do ( for /f "skip=2 tokens=2*" %%a in ('reg query HKLM\SYSTEM\CurrentControlSet\Services\%%# /v Start 2^>nul') do if /i %%b NEQ 0x2 ( echo: echo Enabling %%# service... if /i %%#==sppsvc sc config %%# start= delayed-auto %nul% || echo Failed if /i %%#==WinMgmt sc config %%# start= auto %nul% || echo Failed ) sc start %%# %nul% if !errorlevel! NEQ 1056 if !errorlevel! NEQ 0 ( echo: echo Starting %%# service... sc start %%# echo: call :dk_color %Red% "Failed to start [%%#] service, rest of the process may take a long time..." ) ) :: Check WMI and SPP Errors call :dk_ckeckwmic set e_wmi= set e_wmispp= call :dk_actids if not defined applist ( net stop sppsvc /y %nul% cscript //nologo %windir%\system32\slmgr.vbs /rilc %nul% if !errorlevel! NEQ 0 cscript //nologo %windir%\system32\slmgr.vbs /rilc %nul% call :dk_refresh if %_wmic% EQU 1 wmic path Win32_ComputerSystem get CreationClassName /value 2>nul | find /i "computersystem" 1>nul if %_wmic% EQU 0 %psc% "Get-CIMInstance -Class Win32_ComputerSystem | Select-Object -Property CreationClassName" 2>nul | find /i "computersystem" 1>nul if !errorlevel! NEQ 0 set e_wmi=1 if defined e_wmi (set e_wmispp=WMI, SPP) else (set e_wmispp=SPP) call :dk_actids ) exit /b ::======================================================================================================================================== :: Get Product Key from pkeyhelper.dll for future new editions :: It works on Windows 10 1803 (17134) and later builds. :dk_pkey set pkey= set d1=[DllImport(\"pkeyhelper.dll\",CharSet=CharSet.Unicode)]public static extern int SkuGetProductKeyForEdition(int e, string c, out string k, out string p); set d2=$AP=Add-Type -Member '%d1%' -Name D1 -PassThru; $k=''; $null=$AP::SkuGetProductKeyForEdition(%1, %2, [ref]$k, [ref]$null); $k for /f %%a in ('%psc% "%d2%"') do if not errorlevel 1 (set pkey=%%a) exit /b :: Get channel name for the key which was extracted from pkeyhelper.dll :dk_pkeychannel set k=%1 set pkeychannel= set p=%SystemRoot%\System32\spp\tokens\pkeyconfig\pkeyconfig.xrm-ms set m=[System.Runtime.InteropServices.Marshal] set d1=[DllImport(\"PidGenX.dll\",CharSet=CharSet.Unicode)]public static extern int PidGenX(string k,string p,string m,int u,IntPtr i,IntPtr d,IntPtr f); set d2=$AP=Add-Type -Member '%d1%' -Name D1 -PassThru; $k='%k%'; $p='%p%'; $r=[byte[]]::new(0x04F8); $r[0]=0xF8; $r[1]=0x04; $f=%m%::AllocHGlobal(1272); %m%::Copy($r,0,$f,1272); set d3=%d2% [void]$AP::PidGenX($k,$p,\"00000\",0,0,0,$f); %m%::Copy($f,$r,0,1272); %m%::FreeHGlobal($f); [System.Text.Encoding]::Unicode.GetString($r, 1016, 128).Replace('0','') for /f %%a in ('%psc% "%d3%"') do if not errorlevel 1 (set pkeychannel=%%a) exit /b :dk_gvlk for %%# in (pkeyhelper.dll) do @if "%%~$PATH:#"=="" exit /b for %%# in (Volume:GVLK) do ( call :dk_pkey %osSKU% '%%#' if defined pkey call :dk_pkeychannel !pkey! if /i [!pkeychannel!]==[%%#] ( set key=!pkey! exit /b ) ) exit /b ::======================================================================================================================================== :dk_checkerrors :: Check if the services are able to run or not :: Workarounds are added to get correct status and error code because sc query doesn't output correct results in some conditions set serv_e= for %%# in (%_serv%) do ( set errorcode= set checkerror= sc query %%# | find /i ": 4 RUNNING" %nul% || net start %%# /y %nul% sc start %%# %nul% set errorcode=!errorlevel! if !errorcode! NEQ 1056 if !errorcode! NEQ 0 set checkerror=1 sc query %%# | find /i ": 4 RUNNING" %nul% || set checkerror=1 if defined checkerror if defined serv_e (set "serv_e=!serv_e!, %%#-!errorcode!") else (set "serv_e=%%#-!errorcode!") ) if defined serv_e ( set error=1 call :dk_color %Red% "Starting Services [Failed] [%serv_e%]" ) :: Various error checks set token=0 if exist %Systemdrive%\Windows\System32\spp\store\2.0\tokens.dat set token=1 if exist %Systemdrive%\Windows\System32\spp\store_test\2.0\tokens.dat set token=1 if %token%==0 ( set error=1 call :dk_color %Red% "Checking SPP tokens.dat [Not Found]" ) DISM /English /Online /Get-CurrentEdition %nul% set error_code=%errorlevel% cmd /c exit /b %error_code% if %error_code% NEQ 0 set "error_code=[0x%=ExitCode%]" if %error_code% NEQ 0 ( set error=1 call :dk_color %Red% "Checking DISM [Not Responding] %error_code%" ) %psc% $ExecutionContext.SessionState.LanguageMode 2>nul | find /i "Full" 1>nul || ( set error=1 call :dk_color %Red% "Checking Powershell [Not Responding]" ) for %%# in (wmic.exe) do @if "%%~$PATH:#"=="" ( set error=1 call :dk_color %Gray% "Checking WMIC.exe [Not Found]" ) reg query "HKU\S-1-5-20\Software\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\PersistedTSReArmed" %nul% && ( set error=1 call :dk_color %Red% "Checking Rearm [System Restart Is Required]" ) reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ClipSVC\Volatile\PersistedSystemState" %nul% && ( set error=1 call :dk_color %Red% "Checking ClipSVC [System Restart Is Required]" ) for /f "skip=2 tokens=2*" %%a in ('reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform" /v "SkipRearm" 2^>nul') do if /i %%b NEQ 0x0 ( reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform" /v "SkipRearm" /t REG_DWORD /d "0" /f %nul% call :dk_color %Red% "Checking SkipRearm [Default 0 Value Not Found, Changing To 0]" net stop sppsvc /y %nul% net start sppsvc /y %nul% set error=1 ) set _wsh=1 reg query "HKCU\SOFTWARE\Microsoft\Windows Script Host\Settings" /v Enabled 2>nul | find /i "0x0" 1>nul && (set _wsh=0) reg query "HKLM\SOFTWARE\Microsoft\Windows Script Host\Settings" /v Enabled 2>nul | find /i "0x0" 1>nul && (set _wsh=0) if %_wsh% EQU 0 ( set error=1 call :dk_color %Gray% "Checking Windows Script Host [Disabled]" ) cscript //nologo %windir%\system32\slmgr.vbs /dlv %nul% set error_code=%errorlevel% cmd /c exit /b %error_code% if %error_code% NEQ 0 set "error_code=[0x%=ExitCode%]" if %error_code% NEQ 0 ( set error=1 call :dk_color %Red% "Checking slmgr /dlv [Not Responding] %error_code%" ) if not defined applist ( set error=1 call :dk_color %Red% "Checking WMI/SPP [Not Responding] [%e_wmispp%]" ) set nil= set _sppint= if not %_gent%==1 if not defined error ( for %%# in (SppE%nil%xtComObj.exe,sppsvc.exe) do ( reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ima%nil%ge File Execu%nil%tion Options\%%#" %nul% && set _sppint=1 ) ) if defined _sppint ( call :dk_color %Red% "Checking SPP Interference In IFEO [Found] [Uninstall KMS Activator If There Is Any]" set error=1 ) exit /b ::======================================================================================================================================== :dk_color if %_NCS% EQU 1 ( echo %esc%[%~1%~2%esc%[0m ) else ( %psc% write-host -back '%1' -fore '%2' '%3' ) exit /b :dk_color2 if %_NCS% EQU 1 ( echo %esc%[%~1%~2%esc%[%~3%~4%esc%[0m ) else ( %psc% write-host -back '%1' -fore '%2' '%3' -NoNewline; write-host -back '%4' -fore '%5' '%6' ) exit /b ::======================================================================================================================================== :dk_done echo: if %_unattended%==1 timeout /t 2 & exit /b call :dk_color %_Yellow% "Press any key to %_exitmsg%..." pause >nul exit /b ::======================================================================================================================================== :: 1st column = Activation ID :: 2nd column = GVLK (Generic volume licensing key) :: 3rd column = SKU ID :: 4th column = WMI Edition ID (For reference only) :: 5th column = Build Branch name incase same Edition ID is used in different OS versions with different key (For reference only) :: Separator = "_" :kms38data for %%# in ( 73111121-5638-40f6-bc11-f1d7b0d64300_NPPR9-FWDCX-D2C8J-H872K-2YT43___4_Enterprise 9bd77860-9b31-4b7b-96ad-2564017315bf_VDYBN-27WPP-V4HQT-9VMD4-VMK7H___7_ServerStandard_FE de32eafd-aaee-4662-9444-c1befb41bde2_N69G4-B89J2-4G8F4-WWYCC-J464C___7_ServerStandard_RS5 8c1c5410-9f39-4805-8c9d-63a07706358f_WC2BQ-8NRM3-FDDYY-2BFGV-KHKQY___7_ServerStandard_RS1 ef6cfc9f-8c5d-44ac-9aad-de6a2ea0ae03_WX4NM-KYWYW-QJJR4-XV3QB-6VM33___8_ServerDatacenter_FE 34e1ae55-27f8-4950-8877-7a03be5fb181_WMDGN-G9PQG-XVVXX-R3X43-63DFG___8_ServerDatacenter_RS5 21c56779-b449-4d20-adfc-eece0e1ad74b_CB7KF-BWN84-R7R2Y-793K2-8XDDG___8_ServerDatacenter_RS1 e272e3e2-732f-4c65-a8f0-484747d0d947_DPH2V-TTNVB-4X9Q3-TJR4H-KHJW4__27_EnterpriseN 2de67392-b7a7-462a-b1ca-108dd189f588_W269N-WFGWX-YVC9B-4J6C9-T83GX__48_Professional a80b5abf-76ad-428b-b05d-a47d2dffeebf_MH37W-N47XK-V7XM9-C7227-GCQG9__49_ProfessionalN 034d3cbb-5d4b-4245-b3f8-f84571314078_WVDHN-86M7X-466P6-VHXV7-YY726__50_ServerSolution_RS5 2b5a1b0f-a5ab-4c54-ac2f-a6d94824a283_JCKRF-N37P4-C2D82-9YXRT-4M63B__50_ServerSolution_RS1 7b9e1751-a8da-4f75-9560-5fadfe3d8e38_3KHY7-WNT83-DGQKR-F7HPR-844BM__98_CoreN a9107544-f4a0-4053-a96a-1479abdef912_PVMJN-6DFY6-9CCP6-7BKTT-D3WVR__99_CoreCountrySpecific cd918a57-a41b-4c82-8dce-1a538e221a83_7HNRX-D7KGG-3K4RQ-4WPJ4-YTDFH_100_CoreSingleLanguage 58e97c99-f377-4ef1-81d5-4ad5522b5fd8_TX9XD-98N7V-6WMQ6-BX7FG-H8Q99_101_Core 7b4433f4-b1e7-4788-895a-c45378d38253_QN4C6-GBJD2-FB422-GHWJK-GJG2R_110_ServerCloudStorage 8de8eb62-bbe0-40ac-ac17-f75595071ea3_GRFBW-QNDC4-6QBHG-CCK3B-2PR88_120_ServerARM64_RS5 43d9af6e-5e86-4be8-a797-d072a046896c_K9FYF-G6NCK-73M32-XMVPY-F9DRR_120_ServerARM64_RS4 e0c42288-980c-4788-a014-c080d2e1926e_NW6C2-QMPVW-D7KKK-3GKT6-VCFB2_121_Education 3c102355-d027-42c6-ad23-2e7ef8a02585_2WH4N-8QGBV-H22JP-CT43Q-MDWWJ_122_EducationN 32d2fab3-e4a8-42c2-923b-4bf4fd13e6ee_M7XTQ-FN8P6-TTKYV-9D4CC-J462D_125_EnterpriseS_RS5,VB 2d5a5a60-3040-48bf-beb0-fcd770c20ce0_DCPHK-NFMTC-H88MJ-PFHPY-QJ4BJ_125_EnterpriseS_RS1 7b51a46c-0c04-4e8f-9af4-8496cca90d5e_WNMTR-4C88C-JK8YV-HQ7T2-76DF9_125_EnterpriseS_TH1 7103a333-b8c8-49cc-93ce-d37c09687f92_92NFX-8DJQP-P6BBQ-THF9C-7CG2H_126_EnterpriseSN_RS5,VB 9f776d83-7156-45b2-8a5c-359b9c9f22a3_QFFDN-GRT3P-VKWWX-X7T3R-8B639_126_EnterpriseSN_RS1 87b838b7-41b6-4590-8318-5797951d8529_2F77B-TNFGY-69QQF-B8YKP-D69TJ_126_EnterpriseSN_TH1 39e69c41-42b4-4a0a-abad-8e3c10a797cc_QFND9-D3Y9C-J3KKY-6RPVP-2DPYV_145_ServerDatacenterACor_FE 90c362e5-0da1-4bfd-b53b-b87d309ade43_6NMRW-2C8FM-D24W7-TQWMY-CWH2D_145_ServerDatacenterACor_RS5 e49c08e7-da82-42f8-bde2-b570fbcae76c_2HXDN-KRXHB-GPYC7-YCKFJ-7FVDG_145_ServerDatacenterACor_RS3 f5e9429c-f50b-4b98-b15c-ef92eb5cff39_67KN8-4FYJW-2487Q-MQ2J7-4C4RG_146_ServerStandardACor_FE 73e3957c-fc0c-400d-9184-5f7b6f2eb409_N2KJX-J94YW-TQVFB-DG9YT-724CC_146_ServerStandardACor_RS5 61c5ef22-f14f-4553-a824-c4b31e84b100_PTXN8-JFHJM-4WC78-MPCBR-9W4KR_146_ServerStandardACor_RS3 82bbc092-bc50-4e16-8e18-b74fc486aec3_NRG8B-VKK3Q-CXVCJ-9G2XF-6Q84J_161_ProfessionalWorkstation 4b1571d3-bafb-4b40-8087-a961be2caf65_9FNHH-K3HBT-3W4TD-6383H-6XYWF_162_ProfessionalWorkstationN 3f1afc82-f8ac-4f6c-8005-1d233e606eee_6TP4R-GNPTD-KYYHQ-7B7DP-J447Y_164_ProfessionalEducation 5300b18c-2e33-4dc2-8291-47ffcec746dd_YVWGF-BXNMC-HTQYQ-CPQ99-66QFC_165_ProfessionalEducationN 8c8f0ad3-9a43-4e05-b840-93b8d1475cbc_6N379-GGTMK-23C6M-XVVTC-CKFRQ_168_ServerAzureCor_FE a99cc1f0-7719-4306-9645-294102fbff95_FDNH6-VW9RW-BXPJ7-4XTYG-239TB_168_ServerAzureCor_RS5 3dbf341b-5f6c-4fa7-b936-699dce9e263f_VP34G-4NPPG-79JTQ-864T4-R3MQX_168_ServerAzureCor_RS1 e0b2d383-d112-413f-8a80-97f373a5820c_YYVX9-NTFWV-6MDM3-9PT4T-4M68B_171_EnterpriseG e38454fb-41a4-4f59-a5dc-25080e354730_44RPN-FTY23-9VTTB-MP9BX-T84FV_172_EnterpriseGN ec868e65-fadf-4759-b23e-93fe37f2cc29_CPWHC-NT2C7-VYW78-DHDB2-PG3GK_175_ServerRdsh_RS5 e4db50ea-bda1-4566-b047-0ca50abc6f07_7NBT4-WGBQX-MP4H7-QXFF8-YP3KX_175_ServerRdsh_RS3 0df4f814-3f57-4b8b-9a9d-fddadcd69fac_NBTWJ-3DR69-3C4V8-C26MC-GQ9M6_183_CloudE 59eb965c-9150-42b7-a0ec-22151b9897c5_KBN8V-HFGQ4-MGXVD-347P6-PDQGT_191_IoTEnterpriseS_NI d30136fc-cb4b-416e-a23d-87207abc44a9_6XN7V-PCBDC-BDBRH-8DQY7-G6R44_202_CloudEditionN ca7df2e3-5ea0-47b8-9ac1-b1be4d8edd69_37D7F-N49CB-WQR8W-TBJ73-FM8RX_203_CloudEdition 19b5e0fb-4431-46bc-bac1-2f1873e4ae73_NTBV8-9K7Q8-V27C6-M2BTV-KHMXV_407_ServerTurbine ) do ( for /f "tokens=1-5 delims=_" %%A in ("%%#") do if %osSKU%==%%C ( if %1==getkey if not defined key echo "!applist!" | find /i "%%A" >nul && set key=%%B ) ) exit /b ::======================================================================================================================================== :: Below code is used to get alternate edition name and key if current edition doesn't support KMS38 activation :: IoTEnterpriseS 2021 won't be converted to EnterpriseS 2021 to enable KMS38 activation because later has 5 years less update support :: ProfessionalCountrySpecific won't be converted because it's not a good idea to change CountrySpecific editions :: 1st column = Current SKU ID :: 2nd column = Current Edition Name :: 3rd column = Alternate Edition Activation ID :: 4th column = Alternate Edition GVLK :: 5th column = Alternate Edition Name :: Separator = _ :kms38fallback if %_chan%==0 exit /b for %%# in ( 188_IoTEnterprise_______________73111121-5638-40f6-bc11-f1d7b0d64300_NPPR9-FWDCX-D2C8J-H872K-2YT43_Enterprise 138_ProfessionalSingleLanguage__2de67392-b7a7-462a-b1ca-108dd189f588_W269N-WFGWX-YVC9B-4J6C9-T83GX_Professional ) do ( for /f "tokens=1-5 delims=_" %%A in ("%%#") do if %osSKU%==%%A ( echo "!applist!" | find /i "%%C" 1>nul && ( set altkey=%%D set curedition=%%B set altedition=%%E ) ) ) exit /b ::======================================================================================================================================== :: Script changes below values in official gatherosstate.exe so that it can generate usable ticket in Windows unlicensed state :hex:[ $bytes = [System.IO.File]::ReadAllBytes("gatherosstate.exe") $bytes[320] = 0x9c $bytes[321] = 0xfb $bytes[322] = 0x05 $bytes[13672] = 0x25 $bytes[13674] = 0x73 $bytes[13676] = 0x3b $bytes[13678] = 0x00 $bytes[13680] = 0x00 $bytes[13682] = 0x00 $bytes[13684] = 0x00 $bytes[32748] = 0xe9 $bytes[32749] = 0x9e $bytes[32750] = 0x00 $bytes[32751] = 0x00 $bytes[32752] = 0x00 $bytes[32894] = 0x8b $bytes[32895] = 0x44 $bytes[32897] = 0x64 $bytes[32898] = 0x85 $bytes[32899] = 0xc0 $bytes[32900] = 0x0f $bytes[32901] = 0x85 $bytes[32902] = 0x1c $bytes[32903] = 0x02 $bytes[32904] = 0x00 $bytes[32906] = 0xe9 $bytes[32907] = 0x3c $bytes[32908] = 0x01 $bytes[32909] = 0x00 $bytes[32910] = 0x00 $bytes[32911] = 0x85 $bytes[32912] = 0xdb $bytes[32913] = 0x75 $bytes[32914] = 0xeb $bytes[32915] = 0xe9 $bytes[32916] = 0x69 $bytes[32917] = 0xff $bytes[32918] = 0xff $bytes[32919] = 0xff $bytes[33094] = 0xe9 $bytes[33095] = 0x80 $bytes[33096] = 0x00 $bytes[33097] = 0x00 $bytes[33098] = 0x00 $bytes[33449] = 0x64 $bytes[33576] = 0x8d $bytes[33577] = 0x54 $bytes[33579] = 0x24 $bytes[33580] = 0xe9 $bytes[33581] = 0x55 $bytes[33582] = 0x01 $bytes[33583] = 0x00 $bytes[33584] = 0x00 $bytes[34189] = 0x59 $bytes[34190] = 0xeb $bytes[34191] = 0x28 $bytes[34238] = 0xe9 $bytes[34239] = 0x4f $bytes[34240] = 0x00 $bytes[34241] = 0x00 $bytes[34242] = 0x00 $bytes[34346] = 0x24 $bytes[34376] = 0xeb $bytes[34377] = 0x63 [System.IO.File]::WriteAllBytes("gatherosstatemodified.exe", $bytes) :hex:] ::========================================================================================================================================