Windows 7 activation through a Smoothwall proxy

[Ric_]

I'm having a bit of a nightmare activating Windows 7 through our Smoothie box. The error code received is 0x8004fe33 and, according to Activation fails when you try to activate Windows Vista or Windows Server 2008 over the Internet it is a problem with the proxy connection.

I've tried adding an exception for all the sites listed but that doesn't seem to have worked. The logs also don't seem to show the box hitting any of those sites wither. Any ideas?

BTW - Since I only need to activate two machines at present I don't want to sort out a KMS server yet. I know I can totally unfilter them but it's beside the point as it should work and it would be handy to have it working anyway.

[tom_newton]

Have you stuck their domains in "do not auth for"? That might help.

[tom_newton]

Ooh, ooh... are you sure activation is using a proxy? does the "proxycfg" command still exist in win7? Sometimes various windows components don't use the proxy as set in IE.

[Ric_]

Have you stuck their domains in "do not auth for"? That might help.

dumb-ass me

Ooh, ooh... are you sure activation is using a proxy? does the "proxycfg" command still exist in win7? Sometimes various windows components don't use the proxy as set in IE.

No it doesn't.

... and now I can't test it because the NIC on theat machine seems to have gone West!

[linkazoid]

I never managed to get ours to work either through our smoothie.

In the end I activated our 2 test machines on a unfiltered connection.

[Sylv3r]

We couldn't activate our Windows 2008 servers through or smoothwall box but added all the microsoft domains to the do not authenticate setting and it works. How ever it requires microsoft.com so I tend to add / remove this as and when required as I don't want to give a free reign to MSN messenger etc.

[paul_1989]

After some network card problems yesterday that are now resolved, the error code seems to have changed to 0xC004FC03.

I tried adding microsoft.com to the smoothwall "Do not require authentication for these domains" section and tried activating again. It then produced the error code 0x80072EFD.

Each error seems to point to network problems in that it cannot establish a connection with the server.

(Oh, I'm Ric's assistant by the way )

[tom_newton]

Hi Paul! Must be a tough job working for Ric

Is there anything interesting in the logs? I'm thinking you might want to check for banned filetypes etc.

You would have hoped microsoft would have made this easier eh?

I'll have a blocklist daemon look into this, break out the MSDN subs

Tom

[mounters]

Have you added the proxy in through netsh?

cmd
netsh
winhttp
set proxy ADDRESS:PORT

[paul_1989]

In my application logs im getting 2 errors each time I try to activate.

Source: Security-SPP
Event ID: 1008
Acquisition of Secure Processor Certificate failed. hr=0xC004FC03

Source: Security-SPP
Event ID: 8200
License acquisition failure details.
hr=0xC004FC03



Just tried adding the proxy through netsh and no joy, still getting error code: 0xC004FC03

[mounters]

In my application logs im getting 2 errors each time I try to activate.

Source: Security-SPP
Event ID: 1008
Acquisition of Secure Processor Certificate failed. hr=0xC004FC03

Source: Security-SPP
Event ID: 8200
License acquisition failure details.
hr=0xC004FC03



Just tried adding the proxy through netsh and no joy, still getting error code: 0xC004FC03

Have you installed any root certificate updates on the box that wont activiate Update for Root Certificates [November 2009] (KB931125)

[nile_c]

Hi guys,

In addition to the usual Microsoft domains for "Do not auth", I found you also need the following:
activation.sls.microsoft.com

Please let me know whether that works.

EDIT: Forgot to add, you need to allow the domain too.

[john]

To be weird mine worked 110% perfectly through my smoothwall and that was both 2008 R2 and Windows 7. Sorry to be annoying but someone has to!

[paul_1989]

Haha, thanks John.

nile_c, no luck there, we already have those settings in place

mounters, as far as I can see everything i sup to date and running fine.

[nile_c]

Strange, could you send me your web filter log whilst a client attempts to activate?