Microsoft Office Software Protection Licensing Information - KMS - Windows
Log In or Register to download the BES file, and more.

1 Votes

Versioning - This is the latest version.

1Microsoft Office Software Protection Licensing Information1/7/2013 10:56:35 AM
2Microsoft Office Software Protection Licensing Information - KMS - Windows9/3/2014 11:50:50 AM

Description

Retrieves information about Microsoft Office Software Protection Services.  For use with Office versions 2010 and newer.  (version 14+)

This analysis may not be accurate in all cases and may need some refinement for Win8 and the newest version of office.


Property Details

ID2994711
StatusProduction - Fully Tested and Ready for Production
TitleMicrosoft Office Software Protection Licensing Information - KMS - Windows
DomainBESC
KeywordsMicrosoft Office
Added by on 9/3/2014 11:50:50 AM
Last Modified by on 9/3/2014 11:50:50 AM
Counters 15583 Views / 153 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 1 rating. ** Log In or Register to add your rating.

Properties

Names of licensed products
Period 12 hours
 
  * Results in a true/false
Show indented relevance
concatenation "; " of string values of selects "Name from OfficeSoftwareProtectionProduct WHERE PartialProductKey is not null" of wmi
License State
Period 12 hours
 
  * Results in a true/false
Show indented relevance
concatenation "; " of unique values of (if it = 0 then "Unlicensed" else if it = 1 then "Licensed" else if it = 2 then "OOB Grace" else if it = 3 then "OOT Grace" else if it = 4 then "NonGenuineGrace" else if it = 5 then "Notification" else "<unkown>") of (integer values of selects "LicenseStatus from OfficeSoftwareProtectionProduct WHERE PartialProductKey is not null" of wmi)
Grace Period Expiration
Period 12 hours
 
  * Results in a true/false
Show indented relevance
concatenation "; " of unique values of (it as string) of (if exists integer value of it and integer value of it >0 then now + (minute * (integer value of it)) else nothing) of ((selects "GracePeriodRemaining from OfficeSoftwareProtectionProduct WHERE PartialProductKey is not null" of wmi))
Office KMS Server Enabled
Period 12 hours
 
  * Results in a true/false
Show indented relevance
(if exists integer value of it and integer value of it = 1 then "Yes" else "No") of selects "IsKeyManagementServiceMachine from OfficeSoftwareProtectionService" of wmi
Activation Method
Period 2 days
 
  * Results in a true/false
Show indented relevance
concatenation "; " of unique values of (if exists string value of it then preceding text of first " " of following text of last ", " of string value of it as string else nothing) of selects "Description from OfficeSoftwareProtectionProduct WHERE PartialProductKey is not null" of wmi
Partial Product Key
Period 1 day
 
  * Results in a true/false
Show indented relevance
concatenation "; " of (if exists string value of it then string value of it as string else nothing) of selects "PartialProductKey from OfficeSoftwareProtectionProduct WHERE PartialProductKey is not null" of wmi
KMS Server (WMI)
Period 12 hours
 
  * Results in a true/false
Show indented relevance
concatenation "; " of unique values of (if exists string value of it then string value of it as string else nothing) of selects "DiscoveredKeyManagementServiceMachineName from OfficeSoftwareProtectionProduct WHERE PartialProductKey is not null" of wmi
KMS Server (Registry)
Period 2 days
 
  * Results in a true/false
Show indented relevance
concatenation "; " of unique values of (it as string) of ( values "KeyManagementServiceName" of it; values "KeyManagementServiceName" of keys of keys of it ) of keys "OfficeSoftwareProtectionPlatform" of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft" of (native registry;registry)

Relevance

isWindows (Relevance 1172)
Used in 1152 fixlets and 538 analyses   * Results in a true/false
Show indented relevance
windows of operating system
Used in 2 fixlets and 23 analyses   * Results in a true/false
Show indented relevance
exists wmi
Used in 1 analsis   * Results in a true/false
Show indented relevance
(exists keys whose (value "DisplayName" of it as string starts with "Microsoft Office" AND value "DisplayVersion" of it as string as version >= "14.0" as version) of keys "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of (registry;native registry)) OR (exists keys "OfficeSoftwareProtectionPlatform" of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft" of (native registry;registry))

Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!
jgstew -
this is pretty old, I'm sure the relevance could be better written as is, plus adding support for more versions. The issue is I don't have office installed anywhere to really test against. I'll have to do that sometime on a test VM.
zile -
Great work on an Great analysis! Thank you. Is it possible to update analysis for office2013 and 2016 on windows 10. clients returns 80041010: Invalid class
jgstew -
Original creator: https://www.ibm.com/developerworks/mydeveloperworks/profiles/user/dgibson91
jgstew -
The newer location is here: https://www.ibm.com/developerworks/forums/thread.jspa?messageID=14754800
jgstew -
I think the source may have been here: http://forum.bigfix.com/viewtopic.php?id=5512
jgstew -
This is based on a .bes file I downloaded from somewhere. I need to re-locate the source so I can cite it.