Check Windows activation status on a workstation

Confirming Windows activation is a routine troubleshooting step when users report watermark messages ("Activate Windows"), missing personalization settings, or after hardware changes, reimaging, or a key swap. An unactivated Windows installation can also block Windows Update features, BitLocker provisioning under some policies, and compliance reporting.

Run this recipe when:

• A user reports an "Activate Windows" watermark or nag dialog.
• A machine has just been reimaged, joined to the domain, or had its motherboard replaced.
• You are auditing fleet compliance before a Microsoft licensing true-up.
• MDM/Intune reports a device as non-compliant for licensing.

After following this recipe you will be able to:

• Determine whether Windows is activated, in grace period, in notification mode, or unlicensed.
• Identify the activation channel (Retail, OEM, Volume/KMS, or MAK).
• Retrieve the partial product key and activation ID for escalation.
• Collect a standardized activation report suitable for ticket notes.

Cautions

• Do not run slmgr /rearm unless you specifically intend to reset the activation timer — it is limited to a small number of uses per image.
• Avoid slmgr /upk (uninstall product key) on production machines; it will deactivate Windows immediately.
• Displaying full product keys may violate your organization's data handling policy. The commands below intentionally show only the last five characters.
• On KMS-activated devices, an activation failure may simply mean the device cannot currently reach the KMS host — check network/VPN before escalating to license replacement.
• Activation state queried remotely requires administrative rights on the target device and WinRM or PS Remoting enabled.