Bill & Ted Face the NCE

Patch My Pc | install & update thousands of apps

This blog will show you an issue in which your lovely Windows Enterprise subscription license could be downgraded to Pro out of the blue.

I decided to pull this part out of another licensing blog because it looks like things were getting mixed up! If you are interested in the main licensing blog…. here it is!

1. Windows Enterprise Subscription is not valid

Last week a small licensing issue started and with small, I mean “a total licensing shit storm”

Image - 490138] | Shitstorm | Know Your Meme

Every time I look at this gif, it made me laugh… so I needed to use it!

Suddenly, the grace period ended, and almost all of the Windows 10 Enterprise licenses were downgraded to Windows 10 Pro. When looking at the activation status in Windows, it shows that the Windows 10 Enterprise subscription is no longer valid!

Windows Enterprise subscription is not valid

Guess what happens when your device is suddenly back to its old Pro version? Here is one of the many examples! Direct Access will stop working! As shown below, you need an Enterprise license to use it!

It’s bad that DirectAccess is not available, but have you considered what would happen with Applocker when your Windows Enterprise device suddenly becomes Pro again in a HAADJ environment?

Applocker will switch from being Enforced to Audit modus and will stop working. When Applocker stops working, your devices will be unprotected!

Clusterfuck GIFs | Tenor

2. What Caused the license to not be valid anymore

Let’s take a look at some Tweets and messages I got first to determine if we could spot some similarities

Klaus Østergren on Twitter: “Anyone else seeing Windows Pro not activating Enterprise – even if the user has valid M365 E3/E5 license? Requirements seem to be OK @wmugdk (I have seen @Mister_MDM ‘s excellent write-up reg. conditional access – but no luck so far). Any other pointers / ideas?” / Twitter

Besides all of the nice responses I got on Twitter, also some people reached out to me on my own blog

new commerce experience and the graceperiod of 90 days has expired

They all have 1 thing in common…. the word NCE. It looks like this issue is only occurring when you switched to the New Commerce Experience (NCE). Even Microsoft is acknowledging that this is an issue!

Looking at the text above it tells us that there seems to be an issue with the NCE subscription. Another Microsoft response was telling us that they had multiple cases in which the license was not “synced” correctly to all services, resulting in clients not upgrading their license

When digging into the Store Event log or running the licensingdiag.exe -cab command you will notice some errors in the event log that could be indicating that you have an issue:

It’s telling us the next thing: “the entitlement is in a state that prevents it from being used to create a content license” This error seems to occur on each device that is experiencing this licensing issue!

Please Note: Read more about why the Store is responsible for Subscription activation issues in this separate blog

https://call4cloud.nl/2022/05/night-at-the-windows-store-api-service-secret-of-the-subscription-activation

3. HAADJ Fix

For now, Microsoft has not provided an official validated fix, but if you are experiencing this issue from HAADJ devices and want to temporarily fix it, you could run this command.

cscript.exe C:\Windows\System32\slmgr.vbs -ipk NPPR9-FWDCX-D2C8J-H872K-2YT43

It will put in a generic KMS enterprise key for the time being… after entering it.. the HAADJ device will become enterprise again. I guess something is better than nothing! It’s like choosing between 2 evils?

The Witcher The Lesser Evil GIF - The Witcher The Lesser Evil Theyre Both  Bad - Discover & Share GIFs

4. No AADJ Fix?

In the meantime, Microsoft needs to fix the issue ASAP because it looks like AADJ devices are also experiencing this issue… After publishing this blog, I received some feedback on what is causing it.

Please Note: This licensing issue is due to the new commerce experience tool. It affects all E3/E5 licenses purchased before 29th April 2022. To solve this issue, MS needs to manually sync the licenses to the tenants

I guess you need to reach out to Microsoft Support and ask them to start syncing the licenses!

Conclusion

This time not a grace period issue or a Windows store API connection issue or Conditional Access that is messing up our upgrade from PRO to Windows Enterprise but a syncing issue with the NCE licenses in the backend at Microsoft (as it looks like)

So In Sync GIFs - Get the best GIF on GIPHY

I also wrote some other blogs about Licensing issues, feel free to check them!

Windows Licensing Series – Call4Cloud

7 thoughts on “Bill & Ted Face the NCE

  1. Hey,

    Do you know how much leeway time applying the KMS key will give until everything starts falling over?

    We have this issue and it’s a bloody nightmare! Thanks so much for this blog.

    1. Hi.. Not exactly 100% sure … but hopefully it gives Microsoft enough time to fix it in all tenants

  2. Thank you !! I was going crazy, all my laptops downgraded to Pro and I could not find an explanation.

    TI will try contacting Microsoft Support.

  3. Thanx for this blog 🙂

    Submitted a ticket to MS with your explanation and site, see below their answer, so it saved me a lot of time

    Hello Team,

    I reviewed the case and found that the issue is at backend at tenant level. This is an ongoing issue, and I am working on this with PG team.

    I already shared the case summary and my findings with PG. I will update you once PG team update me with the next set of action.

    Also, as this is a known issue, we are getting high volume for the same, I do not have an ETA for the fix but based on the trend so far it might take 2 to 3 days.

  4. There is a conflict with some devices in the Microsoft license for Windows, as our devices were upgraded to Enterprise, while users have E3 licenses. However, some users are registering their devices on another tenant, which causes another Microsoft license to be applied, resulting in a conflict and keeping Windows in Pro version.I know the problem and the solution is to disconnect the second account from the “Work or School” account, but my question is if there is another solution,

    1. so far i know removing that second school account is the only way… luckily you can automate it : https://call4cloud.nl/removing-secondary-work-or-school-accounts/

Leave a Reply

Your email address will not be published. Required fields are marked *

30  −  22  =  

Proudly powered by WordPress | Theme: Wanderz Blog by Crimson Themes.