10.24 Win7激活失效

https://scz.617.cn/windows/201707171244.txt

Q:

一台虚拟机里的x64/Win7，用修改BIOS的办法激活过，最近不知什么补丁导致激活失
效。

A: 啥都不懂的长翅膀的书@weibo

也许是KB971033

D: scz

--------------------------------------------------------------------------
http://support.microsoft.com/kb/971033/
https://support.microsoft.com/en-us/help/971033/description-of-the-update-for-windows-activation-technologies

http://go.microsoft.com/fwlink/?linkid=150841
http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/Windows6.1-KB971033-x86.MSU

http://go.microsoft.com/fwlink/?linkid=152411
http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/Windows6.1-KB971033-x64.MSU
--------------------------------------------------------------------------
Validation is an online process that enables you to verify that the copy
of Windows 7 that is running on your computer is activated correctly and
is genuine.

For an Enterprise customer who uses Key Management Service (KMS) or
Multiple Activation Key (MAK) volume activation, we generally recommend to
NOT install this update in their reference image or already deployed
computers. This update is targeted at consumer installs of Windows using
RETAIL activation.
--------------------------------------------------------------------------

$ wusa.exe Windows6.1-KB971033-x86.MSU /extract:dest

$ expand.exe -D dest\Windows6.1-KB971033-x86.cab
...
dest\windows6.1-kb971033-x86.cab: watux.exe
dest\windows6.1-kb971033-x86.cab: watweb.dll
dest\windows6.1-kb971033-x86.cab: npwatweb.dll
dest\windows6.1-kb971033-x86.cab: watadminsvc.exe
...

$ mkdir dest\Windows6.1-KB971033-x86

$ expand.exe -F:* dest\Windows6.1-KB971033-x86.cab dest\Windows6.1-KB971033-x86

KB971033会导致如下激活方案失效:

bios440.filename = "VMWARE65_SLP1_SLIC21_DELL.ROM"

微软官方描述声称，联网验证，不建议企业用户安装该补丁，主要针对零售版用户。

假设不幸安装了这个补丁，可用如下命令确认:

$ wmic qfe get hotfixid | findstr KB971033
KB971033

$ powershell get-hotfix -id KB971033

Source        Description      HotFixID      InstalledBy          InstalledOn
------        -----------      --------      -----------          -----------
...           Update           KB971033      ...                  2017/7/6 0:00:00

在services.msc里可以看到"Windows激活技术服务":

$ sc query WatAdminSvc

SERVICE_NAME: WatAdminSvc
        TYPE               : 10  WIN32_OWN_PROCESS
        STATE              : 1  STOPPED
        WIN32_EXIT_CODE    : 1077  (0x435)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0

$ sc qc WatAdminSvc

SERVICE_NAME: WatAdminSvc
        TYPE               : 10  WIN32_OWN_PROCESS
        START_TYPE         : 3   DEMAND_START
        ERROR_CONTROL      : 1   NORMAL
        BINARY_PATH_NAME   : C:\Windows\system32\Wat\WatAdminSvc.exe
        LOAD_ORDER_GROUP   :
        TAG                : 0
        DISPLAY_NAME       : Windows 激活技术服务
        DEPENDENCIES       :
        SERVICE_START_NAME : LocalSystem

任务计划里也有相应项:

控制面板
    管理工具
        任务计划程序
            Microsoft
                Windows
                    Windows Activation Technologies
                        ValidationTask
                            "%SystemRoot%\system32\Wat\WatAdminSvc.exe" /run
                        ValidationTaskDeadline
                            "%SystemRoot%\system32\schtasks.exe" /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"

假设已经中招，用如下步骤恢复激活状态

卸载KB971033:

$ wusa.exe /uninstall /kb:971033

重置计算机的授权状态:

$ slmgr.vbs /rearm

重启后激活已经生效。