[mdt] VAMT/KMS/ADBA - still needed?

[LeMarchand]

Currently using MDT that deploys the OS only (with MAK) and then everything else is deployed via GPO, including Office 2021 (with MAK). One day I'll get around to working out Task Sequences, but it works fine.

 

I also have VAMT set up but the only time it gets used is when one of the Suite PCs, which are currently on the old "fat image", gets re-imaged and needs Windows/Office reactivating. As the suite is being MDT'd over summer, is there still a need for VAMT or similar? The server that currently holds it is being decommissioned and I'm wondering if there's any point transferring the role.

[ThatBoringBloke]

I've recently switched our Windows estate over to MAK from KMS / VAMT and not looked back.

I run a script that installs the Keys for Windows and Office 2021 LTSC and everything just works.

I always found it to be a right pain in the rear adding new keys.

[LeMarchand]

Just a little

 

[3s-gtech]

Using Active Directory (ADBA) for license activation, I retired my VAMT and KMS servers. That was years ago, and not needed them since.

[LeMarchand]

Using Active Directory (ADBA) for license activation, I retired my VAMT and KMS servers. That was years ago, and not needed them since.

 

Is even that needed, as Windows gets done with MDT and Office has it baked into the config.xml?

[3s-gtech]

I'm not 100% sure in your context. I use it to add in new keys when we get new agreements and KMS keys for them, but it sits on a DC doing no harm.

[ThatBoringBloke]

Is even that needed, as Windows gets done with MDT and Office has it baked into the config.xml?

 

Its only required if thats the way you want to activate your licences.

Using MAK keys the clients will simply go to MS and activate themselves without the need to install any services on your servers, be that KMS or AD.

As previously said I run a script to install the Keys I want to use and then force activation.

[LeMarchand]

As it appears you need KMS keys for ADBA that MS no longer automatically issue and discourage the use of, I'm going to uninstall the VAMT role in the hols and keep my fingers crossed. I personally would have thought KMS is less easy to abuse, but what do I know?

 

Thanks folks!

[andy_b]

They probably don't like KMS anymore because of things like this: https://github.com/Wind4/vlmcsd