Attempting to activate an Active Directory-Based Activation throws the error: “Access is denied.”

Problem

You attempt to activate a new Windows Server 2012 R2 KMS server as an Active Directory-Based Activation:

image

clip_image002

image

image

… but receive the following error:

The following error has occurred. Please resolve the error and try again.

Description:

Access is denied.

image

Solution

The reason this error is presented is because the KMS server is not a domain controller.  The following TechNet article describes the requirements for setting up an an Active Directory-Based Activation KMS server:

Activate using Active Directory-based activation
https://technet.microsoft.com/en-us/library/dn613828.aspx

image

5 Responses

  1. I had the same problem and the resolution for me was running Volume Activation Tools with elevated privileges by right clicking the icon and selecting, run as administrator.

    Until I did this I continually got an access denied error but after that it worked fine.

  2. Hello,

    I use the following command in an elevated cmd.exe:
    cscript slmgr.vbs /ad-activation-online XXXXX-XXXXX-XXXXX-XXXXX-XXXXX "WindowsServer2016Datacenter"

    Best Regards
    R.

  3. Thank you Chris Magnuson. That was my problem… could not figure it out… I had Enterprise Admins and could not understand 'Access Denied'. Never thought of such a basic thing (never mentioned in the MS docs either).

    –David

  4. I had to edit the dcom permissions. I had to add domainadministrators permissions to DCOM.

    run: dcomcnfg
    Component Servers -> Computers -> Right click on "My Computer" and click properties
    Click on Com Security tab
    Click on both Edit Default buttons and add domainadministrators and check mark all permissions.