Updated December 2024
Windows 11 Volume Activation: The IT Admin's Complete Guide
Deploy and activate hundreds or thousands of Windows 11 machines without touching each one. Here's how enterprise licensing actually works.
What Is Volume Activation?
If you're managing more than a handful of Windows PCs, entering product keys manually on each machine is a nightmare. That's where volume activation comes in — it's Microsoft's solution for activating many computers at once using a single license agreement.
Volume activation isn't just about convenience. It's about compliance, manageability, and having proper audit trails. When someone asks 'are we licensed correctly?', volume activation gives you a clear answer.
This guide covers the three main methods: KMS (Key Management Service), MAK (Multiple Activation Key), and the newer Azure AD-based activation. Each has its place depending on your network setup and organizational needs.
Volume Activation Methods at a Glance
Three paths to enterprise activation
KMS (Key Management Service)
Set up a server that activates clients automatically on your network. Clients check in every 180 days.
Best for: Organizations with 25+ machines on a well-connected network
Pros
- • Fully automatic once set up
- • No internet required for clients
- • Centralized management
Cons
- • Requires dedicated server/VM
- • Minimum 25 client threshold
- • Clients must reconnect every 180 days
MAK (Multiple Activation Key)
Each machine activates directly with Microsoft using your volume key. One-time activation, permanent result.
Best for: Smaller deployments, disconnected machines, or test environments
Pros
- • One-time activation — never expires
- • Works offline with phone activation
- • No server infrastructure needed
Cons
- • Limited number of activations
- • Manual or scripted deployment
- • Must contact Microsoft for more activations
Azure AD-Based Activation
Machines joined to Azure AD activate automatically via Microsoft 365 or Windows 11 Enterprise subscription.
Best for: Cloud-first organizations with Microsoft 365 E3/E5 or Windows Enterprise subscriptions
Pros
- • No on-premises infrastructure
- • Works anywhere with internet
- • Automatic with Azure AD join
Cons
- • Requires Azure AD and subscription
- • Internet dependency
- • Only for Windows 11 Pro → Enterprise upgrade
KMS Activation Deep Dive
The workhorse of enterprise Windows activation
How KMS Works
- 1You install a KMS host server with your organization's KMS key
- 2Client machines use Generic Volume License Keys (GVLKs) — these are public keys
- 3Clients discover the KMS server via DNS or direct configuration
- 4KMS server counts unique clients and, once threshold is met (25 for Windows), starts activating
- 5Clients reactivate every 180 days to stay activated
Setting Up a KMS Host
Prerequisites
- Windows Server 2019/2022 or Windows 11/10 (any edition)
- Your KMS host key from Microsoft Volume Licensing Service Center (VLSC)
- Port 1688 open on your firewall
- DNS access to publish SRV record (optional but recommended)
1. Install the KMS host key
slmgr.vbs /ipk <Your-KMS-Host-Key>Replace with your actual key from VLSC
2. Activate the KMS host online
slmgr.vbs /atoOr use /ato for phone activation if offline
3. Verify KMS host is running
slmgr.vbs /dlvLook for 'KMS Host' in the license status
4. Publish in DNS (optional)
_vlmcs._tcp SRV record pointing to your KMS hostEnables automatic KMS discovery
Configuring Windows 11 Clients
Client machines need a GVLK (Generic Volume License Key). These are public and available from Microsoft documentation.
| Edition | GVLK |
|---|---|
| Windows 11 Pro | W269N-WFGWX-YVC9B-4J6C9-T83GX |
| Windows 11 Pro N | MH37W-N47XK-V7XM9-C7227-GCQG9 |
| Windows 11 Enterprise | NPPR9-FWDCX-D2C8J-H872K-2YT43 |
| Windows 11 Enterprise N | DPH2V-TTNVB-4X9Q3-TJR4H-KHJW4 |
| Windows 11 Education | NW6C2-QMPVW-D7KKK-3GKT6-VCFB2 |
| Windows 11 Pro for Workstations | NRG8B-VKK3Q-CXVCJ-9G2XF-6Q84J |
Set GVLK on client
slmgr.vbs /ipk NPPR9-FWDCX-D2C8J-H872K-2YT43Use the key matching your Windows edition
Point to KMS server (if not using DNS)
slmgr.vbs /skms kms-server.yourdomain.com:1688Replace with your KMS server address
Force activation attempt
slmgr.vbs /atoTriggers immediate activation check
The 25-Client Threshold
KMS won't start activating Windows clients until it has seen at least 25 unique machines. This is a Microsoft requirement to prevent small organizations from avoiding volume licensing.
- Virtual machines count toward the threshold
- Machines don't need to contact KMS simultaneously — the count accumulates
- Each unique CMID (Client Machine ID) counts once
- Count resets if KMS host is rebuilt, so backup your configuration
MAK Activation Explained
Simple, permanent activation for distributed devices
How MAK Works
A Multiple Activation Key is essentially a product key with a set number of allowed activations. Each machine contacts Microsoft (online or by phone), uses one activation from your pool, and stays activated forever.
- Each key has a limited activation count (e.g., 500 activations)
- Once activated, that machine is permanently licensed
- Activations don't expire — hardware changes may require reactivation
- You can request additional activations from Microsoft if needed
When to Use MAK
Remote/disconnected machines
Laptops that rarely connect to corporate network
Branch offices without local infrastructure
Small sites that can't host or reliably reach a KMS server
Test and development environments
VMs and machines that spin up and down frequently
Below KMS threshold
Fewer than 25 Windows machines to activate
Online Activation (Easiest)
slmgr.vbs /ipk <Your-MAK-Key>Install your MAK key
slmgr.vbs /atoActivate online — done in seconds
VAMT Proxy Activation (For Many Machines)
Use Volume Activation Management Tool (VAMT) to activate multiple computers at once, even if they don't have internet access.
- 1Install VAMT on a management workstation with internet
- 2Add target machines to VAMT (by AD, workgroup, or IP)
- 3Install product keys to target machines
- 4Collect activation IDs from targets
- 5Perform proxy activation through your management machine
- 6Apply confirmations back to target machines
Phone Activation (Truly Offline)
- 1Run: slmgr.vbs /ipk <Your-MAK-Key>
- 2Run: slui 4 (opens phone activation wizard)
- 3Select your country and call the number shown
- 4Read your Installation ID to the automated system
- 5Enter the Confirmation ID you receive
- 6Activation complete — no internet required
Azure AD-Based Activation
Cloud-native licensing for modern workplaces
How It Works
Azure AD-based activation (formerly called Subscription Activation) lets devices running Windows 11 Pro automatically upgrade to Windows 11 Enterprise when a licensed user signs in.
- Device must be Azure AD joined or Hybrid Azure AD joined
- User must be assigned a Windows 11 Enterprise E3/E5 or Microsoft 365 E3/E5 license
- Internet connectivity for license validation
- Windows 11 Pro installed (gets upgraded to Enterprise automatically)
Zero infrastructure
No KMS servers, no MAK keys to manage
User-based licensing
License follows the user, not the device
Automatic upgrade
Pro → Enterprise happens transparently at sign-in
Cloud-first
Perfect for remote and hybrid work scenarios
Setting Up Azure AD Activation
Ensure devices are Azure AD joined
Settings > Accounts > Access work or school > Connected to [org] Azure AD
Assign licenses to users
In Microsoft 365 admin center, assign Windows 11 Enterprise E3/E5 or M365 E3/E5 to users
User signs in on the device
Windows automatically checks license and upgrades to Enterprise
Verify upgrade
Settings > System > About — should show Windows 11 Enterprise
Important Considerations
- If user's license is removed, device reverts to Pro after grace period
- Works with Intune and other MDM solutions
- Hybrid Azure AD join also works for on-premises domains
- Requires periodic internet connectivity to validate license
Which Activation Method Should You Use?
Method Comparison
| Feature | KMS | MAK | Azure AD |
|---|---|---|---|
| Activation count | Unlimited | Limited (request more) | Per-user license |
| Internet required (client) | No | For online activation | Yes |
| Infrastructure needed | KMS server | None | Azure AD |
| Activation persistence | 180 days renewal | Permanent | License-dependent |
| Minimum devices | 25 | 1 | 1 |
| Best for | Large on-prem | Small/remote | Cloud-first |
Troubleshooting Volume Activation
Useful Diagnostic Commands
slmgr.vbs /dliDisplay basic license infoslmgr.vbs /dlvDisplay detailed license infoslmgr.vbs /atoAttempt activationslmgr.vbs /cpkyClear product key from registry (security)slmgr.vbs /rearmReset activation timer (limited uses)nslookup _vlmcs._tcp.domain.comCheck KMS DNS SRV recorddsregcmd /statusCheck Azure AD join statusBest Practices for Volume Activation
Document everything
Keep records of which method is used where, KMS server locations, and MAK activation counts
Use VAMT for management
Volume Activation Management Tool provides centralized tracking and proxy activation
Monitor KMS health
Set up alerts for KMS server availability and check activation counts regularly
Plan for disaster recovery
Backup KMS configuration; know how to restore or rebuild if the host fails
Consider hybrid approaches
Don't force one method everywhere — use the right tool for each scenario
Stay compliant
Volume activation doesn't mean unlimited licenses — ensure you have matching agreements
Frequently Asked Questions
Bottom Line
Volume activation transforms Windows deployment from a tedious, machine-by-machine process into a streamlined, automated operation. The right method depends on your infrastructure and how your organization works.
For most traditional enterprises, KMS remains the gold standard — set it up once and forget it. Organizations embracing cloud should look at Azure AD-based activation for a future-proof approach. And MAK fills the gaps for edge cases where the other methods don't fit.
The key is understanding your environment: network topology, device count, connectivity, and management preferences. With that clarity, choosing the right activation method becomes straightforward.
Related Windows 11 Guides
Need Volume Licensing?
Contact us for enterprise Windows 11 licensing solutions that fit your organization's needs.
View Windows 11 Business Options