Windows activation Activation Needs an admin

0xC004F074: no KMS host could be contacted

Likely causes

• The PC is off the company network or VPN, so it can't reach the KMS host.
• DNS has no working _vlmcs._tcp SRV record for the KMS host.
• A firewall blocks TCP port 1688 between the client and the KMS host.
• The KMS host itself has a problem.

How to fix it

1. Connect the PC to the company network or VPN and try again.
2. Open the Application event log and look at each event with ID 12288 from the activation attempt. They show which host was tried and what failed.
3. Check DNS: run nslookup -type=all _vlmcs._tcp and confirm it returns your KMS host on port 1688.
4. To test a host directly, from an elevated prompt run cscript \windows\system32\slmgr.vbs -skms <KMS_FQDN>:1688 and then cscript \windows\system32\slmgr.vbs -ato. If that works, the DNS SRV record is the problem. If only the IP address version works, it’s a name resolution problem.
5. Admins: make sure TCP 1688 is allowed through the firewalls on both the client and the KMS host.

Checked against: learn.microsoft.com, learn.microsoft.com