I setup 3 Server 2012 R2 servers about a month ago.  Each one I installed Outlook 2013 as it was/is a requirement for another application.

Earlier this week I was informed that 2 of these servers were alerting to not being activated.

I've tried re-running the ospp.vbs /act command and receive an 0x80070005 error.

I've run 'sfc /scannow' no errors

I've uninstalled Outlook and reinstalled it same error.

I've run the diagnostic tool 'https://technet.microsoft.com/en-us/library/ee624355.aspx' it tells me Office isn't installed.

What else can I try to resolve this issue?

I setup 3 Server 2012 R2 servers about a month ago.  Each one I installed Outlook 2013 as it was/is a requirement for another application

Hi,

Based on your description, you've set up 3 Server 2012 R2 with only Outlook 2013 installed, all were actived with KMS, but 2 of them were alerting with Office deactiveted message, right? If I misunderstood anything, please feel free to correct me.

The error could be caused by security restirction , we could try following steps to solve the issue:

1. Make sure you log on to the server as Local administrator

2. Before running ospp.vbs , run this script from command line as administrator: icacls C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform /grant "Network Service:(OI)(CI)(R,W,D)" /t

3. Run ospp.vbs scripts:

• If the computer has the KMS client key installed, check the licensing status. To do this, type the following command, and then press ENTER:

cscript ospp.vbs /dstatusall

• To check the KMS activation history, type the following command, and then press ENTER:

cscript ospp.vbs /dhistorykms

• To trigger activation, type the following command, and then press ENTER:

cscript ospp.vbs /act

Let me know if it solve your problem. Thank you.

I hadn't tried that as I couldn't see that folder path.

When I try it from an Administrative command prompt I receive an "Access is denied" error.

Hi,

At which step you got Access is denied" error? Step 2 or step 3? How did you log on to the two servers? Are you in the local administrator group?

Meanwhile, we can change the security restriction through GPO, let me know if it works for you.

For Detailed steps, please refer to this article Method #3

This situation may be the result of applying a Plug and Play Group Policy object (GPO).

Computer Configuration / Policies / Windows Settings /Security Settings / System Services / Plug and Play (Startup Mode: Automatic)

If this policy is set, you can resolve this issue by either disabling this policy, or modifying the security settings for the Policy.

How to check the machine to see if that policy is being applied via a domain GPO. 
From the command prompt, run rsop.msc

Check for the the following:



If you see that Plug and Play is set to Automatic but permission is Not Defined, continue with the next steps to grant service rights

To check permissions for the Plug and Play service GPO via command line, run the following command:

sc sdshow plugplay

If all is configured as it should be, the output displayed when running this command will contain the following:

D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)
(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)
(A;;CCLCSWLOCRRC;;;IU)
(A;;CCLCSWLOCRRC;;;SU)
S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

If any of these permissions are missing, run the following command line to set the default permissions for the Plug and Play service:

sc sdset plugplay D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

Alternatively, the following steps can be used to edit the permissions of the Group Policy via a GUI interface:

1. Open the Group Policy that is identified in Method A, Step 1 above, and open the corresponding Group Policy setting. 
2. Click the Edit Security button, and then click the Advanced button.
3. In the Advanced Security Settings for Plug and Play window click Add and then add the SERVICE account. Then, click OK
4. Select the following permissions in the Allow section and then click OK:

Query template
Query status
Enumerate dependents
Interrogate
User-defined control
Read permissions

Note: The Previous rights are the minimum required permissions. 

5. Run gpupdate /force after you apply the previous permissions to the Group Policy setting.

Windows 7 displays "Windows is not Genuine" with an error code of 0x80070005  (Also applies to Office 2010) 

I got the 'Access denied' error at step 2.

I've checked the plug&play GPO we aren't setting it.  As the GPO's applied to this server are applied to other servers which are working fine I'd ruled this out.

I did find this link http://quicksolver.blogspot.com.au/2015/03/office-2010-unable-to-activate-error.html

It refers to Office 2010 and I can't actually rename the key but would it be applicable?  Below screen grabs of what I see.  Unsure why it's not finding the KMSHost automatically (although entering it manually doesn't work)

• Edited by aburrow 19 hours 55 minutes ago

I got the 'Access denied' error at step 2.

I've checked the plug&play GPO we aren't setting it.  As the GPO's applied to this server are applied to other servers which are working fine I'd ruled this out.

I did find this link http://quicksolver.blogspot.com.au/2015/03/office-2010-unable-to-activate-error.html

It refers to Office 2010 and I can't actually rename the key but would it be applicable?  Below screen grabs of what I see.  Unsure why it's not finding the KMSHost automatically (although entering it manually doesn't work)

• Edited by aburrow Thursday, May 21, 2015 11:36 AM

I got the 'Access denied' error at step 2.

I've checked the plug&play GPO we aren't setting it.  As the GPO's applied to this server are applied to other servers which are working fine I'd ruled this out.

I did find this link http://quicksolver.blogspot.com.au/2015/03/office-2010-unable-to-activate-error.html

It refers to Office 2010 and I can't actually rename the key but would it be applicable?  Below screen grabs of what I see.  Unsure why it's not finding the KMSHost automatically (although entering it manually doesn't work)

• Edited by aburrow Thursday, May 21, 2015 11:36 AM

Hi,

Do you mean you don't get access denied on other server with the same GP configuration? Is this the only server left not activated? But from the second message window you sent, Office 2013 is activated and within valid grace period. It still have 28 days left.

For the resolution provided with this url: http://quicksolver.blogspot.com.au/2015/03/office-2010-unable-to-activate-error.html, I'm not sure if it will apply to Office 2013. I would use resolution from Microsoft official sites. Thank you.

Gave up trying to work out why KMS wasn't working.  Setup MAK licenses for these 3 servers

• Marked as answer by aburrow 20 hours 18 minutes ago