Windows 2008 KMS Server Question

Hello,

We have a KMS server in a LAN and would like to activate Windows 2008
machines in our Protected LAn (DMZ). Our security department does not want
all the windows 2008 machines in the DMZ to contact back into the LAN. What
they would like is a server to proxy the request through, this way only one
machine has access back into the LAN.

Is there any way to set up a KMS Proxy server to proxy back activation
requests. Another note is we have an RODC in our DMZ

Thanks

 

Hello,
How many servers in the DMZ?
For Windows Server 2008, the KMS count is 5 so if you have more than 5 it
may be easier to put up another KMS server there.
If it's less than 5 or even more it may be easier to request a MAK key in
addition to your KMS key and use a MAK key for those servers

Thanks,
Darrell Gorter[MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights
--------------------
| >Thread-Topic: Windows 2008 KMS Server Question
| >thread-index: AcnY3p67poyXcO7uTwicTJuj/woA1w==
| >X-WBNR-Posting-Host: 203.34.60.42
| >From: =?Utf-8?B?Qmx1ZW1hbg==?= <BlueMan@discussions.microsoft.com>
| >Subject: Windows 2008 KMS Server Question
| >Date: Tue, 19 May 2009 17:05:01 -0700
| >Lines: 12
| >Message-ID: <0DF539FF-6A56-4717-93E0-8E360BAB3131@microsoft.com>
| >MIME-Version: 1.0
| >Content-Type: text/plain;
| > charset="Utf-8"
| >Content-Transfer-Encoding: 7bit
| >X-Newsreader: Microsoft CDO for Windows 2000
| >Content-Class: urn:content-classes:message
| >Importance: normal
| >Priority: normal
| >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.3168
| >Newsgroups: microsoft.public.windows.server.general
| >Path: TK2MSFTNGHUB02.phx.gbl
| >Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.general:56604
| >NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| >X-Tomcat-NG: microsoft.public.windows.server.general
| >
| >Hello,
| >
| >We have a KMS server in a LAN and would like to activate Windows 2008
| >machines in our Protected LAn (DMZ). Our security department does not
want
| >all the windows 2008 machines in the DMZ to contact back into the LAN.
What
| >they would like is a server to proxy the request through, this way only
one
| >machine has access back into the LAN.
| >
| >Is there any way to set up a KMS Proxy server to proxy back activation
| >requests. Another note is we have an RODC in our DMZ
| >
| >Thanks
| >