Close Menu
    Facebook X (Twitter) Instagram
    Monday, June 23
    X (Twitter) LinkedIn
    All about Endpoint Management
    • Home
    All about Endpoint Management
    Home»Intune»Using Intune remediation – check the windows license activation is subscription or KMS based

    Using Intune remediation – check the windows license activation is subscription or KMS based

    Eswar KonetiBy Eswar KonetiJuly 24, 11:32 pm2 Mins Read Intune 4,730 Views
    Share
    Facebook Twitter LinkedIn Reddit

    Microsoft offers Windows Enterprise E3 and E5 subscriptions as part of Microsoft 365, providing additional enterprise-level capabilities beyond the standard Windows 10 Pro edition.

    This activation method eliminates the need for traditional Key Management Service (KMS) activation and offers more flexibility in licensing management.

    For more information about windows subscription activation and how it works, please refer https://learn.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation

    Devices activated through a subscription show the activation state as 'Windows is activated with a digital license' and display the active Windows enterprise subscription.

    image

    Activation of the windows 10 or windows 11 using the subscription is straight forward as long as the network endpoints and the users are assigned with subscription license.

    How do we find out the devices that are activated with subscription?

    There are no built-in or custom reports that can help you to track with list of devices that are activated using subscription model.

    In this blog post, we will see how to use Remediations feature in Intune to check if the windows 10 or windows 11 is activated using digital/subscription or KMS/other methods.

    Remediations are basically Powershell scripts that detect and fix something for you automatically. In Configuration Manager world, it is configuration Items and baselines.

    For more information about the remediations in intune and sample scripts refer https://learn.microsoft.com/en-us/mem/intune/fundamentals/powershell-scripts-remediation

    Microsoft has recently renamed Proactive Remediations is to Remediations and is available from Devices > Remediations blade.

    Now lets dive into the subject the blog post.

    To identify devices activated with digital (E3 or E5) subscriptions, we will examine the Software Licensing Product information stored in the WMI provider with the softwarelicensingproduct class located in the 'root\cimv2' namespace.

    For digital subscription activation, the last five characters of the PartialProductKey will be '3V66T'.

    image

    Based on this information, we can build a Powershell script to detect and report the status.

    The following is the basic flow of the script.

    image

    Although, there is no remediation script involved in this  but we will simply use the use the detection script in the remediation as well that does nothing.

    Download the DigitalActivation.zip from Github

    Steps how to implement it?

    Go to intune, devices, remediation, Create script package

    image

    image

    Assign to Group of devices with onetime schedule or recurring as per your requirement.

    image

    End results:

    image

    add a column ‘Pre-remediation detection output’ to see the status

    image

    You can now export the data to CSV and find out the devices that are subscription based or KMS based.

    3V66T activation status digital license EMS intune PartialProductKey remediation Scripts softwarelicensingproduct subscription activation
    Share. Twitter LinkedIn Email Facebook Reddit

    Related Posts

    Optimize Your Intune Workflow with a Powerful Browser Extension

    March 22, 10:39 am

    Troubleshooting Windows Hello for Business PIN Reset Issues – Something went wrong

    March 06, 9:48 pm

    Migrate Microsoft 365 Updates from SCCM/MECM to Intune for Co-Managed Devices

    February 11, 9:50 pm

    2 Comments

    1. cosmorion on January 16, 2024 5:31 AM

      Hi, remediation and Check has the sames code lines?

      Reply
      • Eswar Koneti on January 20, 2024 1:39 PM

        Hi,
        The script is only to publish the data generated by the powershell script. There is no remediation required in this case, unless you want to remediation the activation.

        Thanks,
        Eswar

        Reply

    Leave a ReplyCancel reply

    This site uses Akismet to reduce spam. Learn how your comment data is processed.

    Sign Up

    Get email notifications for new posts.

    Author

    I’m Eswar Koneti ,a tech enthusiast, security advocate, and your guide to Microsoft Intune and Modern Device Management. My goal? To turn complex tech into actionable insights for a streamlined management experience. Let’s navigate this journey together!

    Support

    Awards

    Archives

    © Copyright 2009-2024 Eswar Koneti, All rights reserved.

    Type above and press Enter to search. Press Esc to cancel.