Microsoft Product Activation is aDRM technology used byMicrosoft in several of itscomputersoftware programs, most notably itsWindowsoperating system and itsOfficeproductivity suite. The procedure enforces compliance with the program'send-user license agreement by transmitting information about both theproduct key used toinstall the program and the user's computerhardware to Microsoft, inhibiting or completely preventing the use of the program until the validity of its license is confirmed.[1]
The procedure has been met with significant criticism by many consumers, technical analysts and computer experts, who argue that it is poorly designed, highly inconvenient and ultimately does nothing to preventsoftware piracy.[2] The process has been successfullycircumvented on multiple occasions.[3]
This technology is also used in Microsoft Office products during activation. To activate volume-licensed versions of Office, including Project and Visio, one must have aKey Management Service (KMS) host computer. One can configure a Windows Server computer to be a KMS host computer[4] by installing the Volume Activation Services role and then running the Volume Activation Tools wizard.
When installing aretail copy of Windows or Office, the user is asked to input a unique product key supplied on acertificate of authenticity included with the program, which is later verified during activation.[1] Immediate activation is not required following installation, but the program must be activated within a specific period of time in order to continue to function properly. Throughout this grace period, the user will be periodically reminded to activate the program, with warnings becoming more frequent over time.[5]
Certain versions of Windows and Office are available under avolume license, where a single product key is used for multiple installations. Programs purchased under this license must still be activated, with the exception ofWindows XP and all versions of Office released prior toOffice 2010.[6][7][8][9] Businesses using this licensing system have the option of using Microsoft's activationservers or creating and managing their own.[10]
If Windows is pre-installed on a computer by anoriginal equipment manufacturer (OEM), the operating system is automatically activated without the need for interaction from the user.[11] In this case, the copy of Windows installed does not use the product key listed on the certificate of authenticity, but rather a master product key issued to OEMs called aSystem Locked Pre-installation (SLP) key. On each boot, Windows confirms the presence of specific information stored in theBIOS by the manufacturer, ensuring the activation only remains valid on that computer, even if the product key is used on another machine.[6]
If activation is not performed within the grace period, or fails because of an illegal or invalid product key, then the following restrictions will be imposed on the user:
the programs will enter a reduced functionality mode, where files can be viewed but not edited.[2][8][20][21][22]
When activation takes place, the program saves a record of the verification data in the user's computer. If the system is booted up with significant hardware changes, the application will likely require reactivation to prevent the same copy of the program being installed on two different systems.[23]
OnWindows 10 andWindows 11, the activation process can also generate a "digital entitlement", which allows the operating system's hardware and license status to be saved to the activation servers, so that the operating system's license can automatically be restored after a clean installation without the need to enter a product key.[24][25] Newer builds of Windows allow such licenses to be linked to a user’sMicrosoft account. A maximum of 10 retail transferable digital licenses can be linked to a single Microsoft account. OEM digital licenses are not transferable and therefore do not count against this limit.
Activation is performed with a utility supplied with Windows and Office called the Activation Wizard. It can be performed either over theInternet or bytelephone.[1] When activating over the Internet, the Activation Wizard automatically transmits and receives verification data to and from Microsoft servers, completing the process without any interaction by the user.[26] Activation by telephone requires that a user and a Microsoft agent verbally exchange activation information. In this case, an installation ID is generated, which is then read to the agent. The agent verifies the information and replies with a confirmation ID, which is then typed into the Activation Wizard.[26]
The Activation Wizard generates verification data primarily based on information abouthardware in the computer. InWindows XP, information about the following ten categories of hardware is included:[6]
Every time a PC is booted, Windows XP checks the hardware configuration against that which existed at the time of installation. From the above list, six or more items must change for the reactivation to be required. The position is complicated in that the network card MAC address is regarded as three items. Therefore, if the network card is not changed, a change to six or more other items will trigger a reactivation. If the network card is changed, then just three other changes will trigger a reactivation.
PCs that are considered dockable are treated more leniently as hardware will, by definition, regularly change. A dockable PC is one that is equipped with a docking port that connects to an expansion unit that features extra ports or hardware (these are usually ancillary units custom designed for some laptop PCs). A dockable PC is allowed three extra changes beyond a non-dockable PC before reactivation is required.
The verification data is also based on the product key entered during activation. In some cases, the product key is checked against a list of known illegally distributed keys.[27]
.jpg)
Certain retail and OEM copies of Windows and Office sold in certain countries classified asemerging markets have geographical activation restrictions, which only allow the user to activate the product within the indicated region.[28]
InWindows 7 and later, significant hardware changes (e.g.motherboard) may require a re-activation.
In Windows 10 and 11, a user can run the Activation Troubleshooter if the user has changed hardware on their device recently. If the hardware has changed again after activation, they must wait 30 days before running the troubleshooter again.
If activation completes successfully, the user can continue to use the application without any further issues or impediments. Also, if the key gets blacklisted, the application will continue to run as normal unless a clean install and activation is performed after its key has been blacklisted.
The following tables illustrate the usage of product activation throughout Microsoft software, specifying whether the programs can be equipped with retail or volume licensing activation as well as geographical activation restrictions.
| Retail activation | Volume licensing activation | Geographical activation restrictions | |
|---|---|---|---|
| Windows XP | Yes[12] | No[6] | Yes[29] |
| Windows Server 2003 | Yes[13] | No[13] | No |
| Windows Vista | Yes[14] | Yes[30] | Yes[31] |
| Windows Server 2008 | Yes[17][18] | Yes[30] | No |
| Windows 7 | Yes[26] | Yes[30] | Yes[28] |
| Windows 8 | Yes | Yes | Yes |
| Windows Server 2012 | Yes | Yes | No |
| Windows 8.1 | Yes | Yes | Yes |
| Windows 10 | Yes | Yes | Yes |
| Windows Server 2016 | Yes | Yes | No |
| Windows Server 2019 | Yes | Yes | No |
| Windows Server 2022 | Yes | Yes | No |
| Windows 11 | Yes | Yes | Yes |
| Retail activation | Volume licensing activation | Geographical activation restrictions | |
|---|---|---|---|
| Office XP | Yes[8] | No[8] | No |
| Office 2003 | Yes[22] | No[9] | No |
| Office 2007 | Yes[20] | No[7] | No |
| Office 2010 | Yes[21] | Yes[30] | Yes[28] |
| Office 2013 | Yes | Yes | Yes |
| Office 2016* | Yes | Yes | Yes |
| Office 2019* | Yes | Yes | Yes |
| Office 2021* | Yes | Yes | Yes |
| Office 2024* | Yes | Yes | Yes |
*All Office 2016+ and Microsoft 365 (formerly Office 365) licenses are associated with an email account. A personal licence is re-activated on a new machine by logging in to office.com and selecting which of their machines to associate.[32]
While Microsoft says that product activation benefits consumers by allowing Microsoft to produce higher quality software,[1] it has nevertheless received much criticism regarding its design and implementation, effectiveness at stopping piracy and respect ofprivacy rights. For instance, during the development of Windows XP,beta testers strongly criticized the introduction of product activation, particularly because a change in computer hardware required re-activation.[33] Ken Fischer atArs Technica questioned whether activation would ultimately be effective in stopping piracy, stating that while casual computer users would be affected, he would "be a fool to think that someone out there won't find a way to break this whole thing."[34] Dave Wilson, a technology columnist at theLos Angeles Times, describes activation as "just another example of a rapaciousmonopolist abusing computer users who are helpless to do anything about it." He too believed that the system would not have "any significant effect on professional pirates."[35] Fred Langa atInformationWeek, with reference to the transmission of hardware information during activation, stated that "many users are incensed at this level of monitoring, intrusion, and control by Microsoft."[2] Finally, Dr. Cyrus Peikari and Seth Fogie, security consultants, considered product activation to be "hostile both to privacy and to human dignity."[36]
Others defend Microsoft's use of product activation. The Harrison Group, amarket research firm, conducted a study sponsored by Microsoft in 2011 illustrating that computers running activated versions of Windows software were on average 50% faster than their pirated counterparts. The group concluded by stating that users of genuine Microsoft products ultimately receive superior performance while counterfeit users are susceptible to security issues and lost productivity.[37] Fully Licensed GmbH, a developer of digital rights management technology, while criticizing Microsoft for being vague about the nature of information sent from a given computer during activation, nevertheless concluded that activation is not particularly intrusive and does not significantly violate privacy.[38]
Microsoft Product Activation has also been criticized on multiple occasions for violatingpatent law. In 2006, Microsoft was required to pay $142 million to z4 Technologies for infringing on a product activationpatent,[39] while in 2009 Microsoft was ordered to pay $388 million toUniloc for patent infringement in product activation in Windows XP, Office XP and Windows Server 2003.[40]
Microsoft Product Activation has been cracked or circumvented on numerous occasions since it was introduced in 2001. In 2001, a UK security company called Bit Arts successfully managed to bypass product activation on Windows XP,[41] while in 2003, volume license keys for Windows XP were leaked to the public, allowing users who had not purchased a volume license to the operating system to bypass activation.[42] In 2009, several security flaws in Windows 7 were used by hackers to circumvent activation.[3][43]
Since the introduction of Windows Vista, most attempts at circumvention of product activation have focused on using leaked SLP product keys and BIOS information used by OEMs to preactivate Windows. In 2007, a circumvention measure was developed for Windows Vista by warez-groupParadox that simulates the BIOS, allowing leaked SLP information to be fed to the operating system, bypassing activation.[44] In 2009, SLP product keys and certificate information for Windows 7 were leaked to the public, allowing the BIOS to be reconfigured to bypass activation.[45]
The following Microsoft products other than Windows, Windows Server or products from the Office family use activation:[46]
{{cite web}}: CS1 maint: numeric names: authors list (link)