I am now positive this is an issue after chasing activation issues for over a year. I manage roughly 150 computers in the field and have been using Norton for 20+ years. I can’t change the fact they already exist in the field, reinstalling 150 computers across 20 or so companies is not viable.
So please, not looking for judgement for how I got into this position, just help understanding if there is a way out or if I just need to move to another product (NOT what I want to do).
Nothing illegal going on in terms in licensing, each account has their own Norton Account with the appropriate Norton license. But selling a very limited number of models across all sites made it ideal for cloning (ideal being wrong when it comes to Norton, no problems with any other product I have used). Any computer they identify as a clone has the license periodically kicked out and the user receives an expire anti-virus error.
I know what doesn’t work…
- Deleting from online and then reactivating (always remembers the original activation date)
- Full uninstall / reinstall of Norton including manual cleanup.
I changed procedures last year but I cannot afford the security risk if the product is constantly kicking out the license.
Norton / Anyone, is there a way around this or am I SOL?
Thanks.
Norton, anyone? I can’t imagine I am the only person who has run into this.
If you are cloning using an image of the first computer with Norton installed, you would have the same serial number for the Norton installation on all the other computers you clone from the first. That would be why some or all of the clones would lose their activations. As the first device gets the activation confirmed on a regular basis ( one week I think), any other device with the same serial number would be seen by the Norton activation servers as an attempt to avoid paying for your installations. It does not matter that you may have more than enough subscriptions for all the devices. The activation servers have no way of knowing that.
@peterweb This is where Norton needs to step into the conversation about things. There is more to what is happening than cloning to deploy. I’ve followed this customer for a long, long time with this. Norton isn’t responding with anything at all. Just an added RESPECTFUL input.
SA
1 Like
This is why even setting up and using a KMS server has its pitfalls. Thus the reasons I haven’t suggested this approach.
AI Overview
Managing antivirus subscriptions and activations via a Key Management Service (KMS) server involves setting up a central host to manage volume licenses
. This is typically done by installing the Volume Activation Services role, configuring firewall port 1688, and activating the KMS host with a Customer Specific Volume License Key (CSVLK).
How to Manage Antivirus Subscriptions/Activation via KMS:
- Set up the KMS Host: Install the Volume Activation Services role on a Windows Server and use the Volume Activation Tools wizard to enter your organization’s KMS host key.
- Configure DNS: Ensure the KMS host creates a
_VLMCS record in DNS so clients can automatically locate it.
- Configure Clients: Clients (computers) need a Generic Volume License Key (GVLK) to point to the KMS host, which is standard for enterprise volume licensing.
- Verify/Activate: Use
slmgr.vbs /ato on client machines to trigger activation against the KMS server.
- Centralized Management: Use antivirus management consoles (e.g., Bitdefender GravityZone) to sync subscription dates and reconfigure agents.
For non-Microsoft antivirus, management is usually handled through that vendor’s centralized management console, not directly via Windows KMS, which is strictly for Microsoft product volume activation.
Key Considerations:
*** Firewall: Ensure port 1688 is open for inbound traffic.**
*** KMS Keys: Use the appropriate CSVLK from the Microsoft Volume Licensing Service Center.**
*** KMS Client Key: If not a volume edition, you may need to install a GVLK (Generic Volume License Key) on clients.**
*** Alternatives: For small businesses, Microsoft Defender offers free, centrally manageable protection.**
Edited: Create a Key Management Services (KMS) Activation Host in Windows Server | Microsoft Learn
SA
That is not the scenario peterweb. Norton is NOT included in the clone and is only installed AFTER the base clone was applied to a new computer. Even changed the SID to see if they were using that and no luck.
It’s safe to say that none of us know exactly how their activation works, I just need someone who DOES know how it works to explain if I am SOL or not.
The cost per year to Norton is nothing crazy….5K-7K per year for my core base. So, my guess is I will receive no response just as I have for 9 MONTHS for the open ticket 94900448 (open since August 2025, escalated to tier 3 in September and Norton has been ghosting me for 6 months since).
Appreciate the feedback but not the scenario you mentioned isn’t valid in the case and, even if it was, why wouldn’t a simple removal of ALL computers from an Norton Online account and reinstalling Norton resolve the issue? It should.
Thanks for the clarification.
Really Norton, not even a token effort? That really sucks. 25 years of reselling and going to bat for you in the lean, resource intensive days followed by ads flying in your damn face every day. Just to restate, there is already a ticket in tier 3 for this exact issue, it had been in tier 3 for 9 MONTHS and they just stopped replying. So my ask for help here is in lieu of them even responding to an open ticket that I spent 80+ man hours (easily) troubleshooting and working with tier 3 before they went silent. Ticket # 94900448.
2 Likes