Microsoft Office Software Protection Licensing Information - KMS - Windows
1 Votes |
Versioning - This is the latest version.
1 | Microsoft Office Software Protection Licensing Information | 1/7/2013 10:56:35 AM |
2 | Microsoft Office Software Protection Licensing Information - KMS - Windows | 9/3/2014 11:50:50 AM |
Description
Retrieves information about Microsoft Office Software Protection Services. For use with Office versions 2010 and newer. (version 14+)
This analysis may not be accurate in all cases and may need some refinement for Win8 and the newest version of office.
Property Details
2994711 | |
Production - Fully Tested and Ready for Production | |
Microsoft Office Software Protection Licensing Information - KMS - Windows | |
BESC | |
Microsoft Office | |
jgstew on 9/3/2014 11:50:50 AM | |
jgstew on 9/3/2014 11:50:50 AM | |
15583 Views / 153 Downloads | |
* Average over 1 rating. ** Log In or Register to add your rating. |
Properties
Names of licensed products
Period
12 hours
* Results in a true/false |
concatenation "; " of string values of selects "Name from OfficeSoftwareProtectionProduct WHERE PartialProductKey is not null" of wmi
License State
Period
12 hours
* Results in a true/false |
concatenation "; " of unique values of (if it = 0 then "Unlicensed" else if it = 1 then "Licensed" else if it = 2 then "OOB Grace" else if it = 3 then "OOT Grace" else if it = 4 then "NonGenuineGrace" else if it = 5 then "Notification" else "<unkown>") of (integer values of selects "LicenseStatus from OfficeSoftwareProtectionProduct WHERE PartialProductKey is not null" of wmi)
Grace Period Expiration
Period
12 hours
* Results in a true/false |
concatenation "; " of unique values of (it as string) of (if exists integer value of it and integer value of it >0 then now + (minute * (integer value of it)) else nothing) of ((selects "GracePeriodRemaining from OfficeSoftwareProtectionProduct WHERE PartialProductKey is not null" of wmi))
Office KMS Server Enabled
Period
12 hours
* Results in a true/false |
(if exists integer value of it and integer value of it = 1 then "Yes" else "No") of selects "IsKeyManagementServiceMachine from OfficeSoftwareProtectionService" of wmi
Activation Method
Period
2 days
* Results in a true/false |
concatenation "; " of unique values of (if exists string value of it then preceding text of first " " of following text of last ", " of string value of it as string else nothing) of selects "Description from OfficeSoftwareProtectionProduct WHERE PartialProductKey is not null" of wmi
Partial Product Key
Period
1 day
* Results in a true/false |
concatenation "; " of (if exists string value of it then string value of it as string else nothing) of selects "PartialProductKey from OfficeSoftwareProtectionProduct WHERE PartialProductKey is not null" of wmi
KMS Server (WMI)
Period
12 hours
* Results in a true/false |
concatenation "; " of unique values of (if exists string value of it then string value of it as string else nothing) of selects "DiscoveredKeyManagementServiceMachineName from OfficeSoftwareProtectionProduct WHERE PartialProductKey is not null" of wmi
KMS Server (Registry)
Period
2 days
* Results in a true/false |
concatenation "; " of unique values of (it as string) of ( values "KeyManagementServiceName" of it; values "KeyManagementServiceName" of keys of keys of it ) of keys "OfficeSoftwareProtectionPlatform" of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft" of (native registry;registry)
Relevance
isWindows (Relevance 1172)
windows of operating system
Used in 1 analsis | * Results in a true/false |
(exists keys whose (value "DisplayName" of it as string starts with "Microsoft Office" AND value "DisplayVersion" of it as string as version >= "14.0" as version) of keys "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of (registry;native registry)) OR (exists keys "OfficeSoftwareProtectionPlatform" of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft" of (native registry;registry))
Sharing
Social Media: |
Comments
|
|
this is pretty old, I'm sure the relevance could be better written as is, plus adding support for more versions. The issue is I don't have office installed anywhere to really test against. I'll have to do that sometime on a test VM. |
|
|
Great work on an Great analysis! Thank you. Is it possible to update analysis for office2013 and 2016 on windows 10. clients returns 80041010: Invalid class |
|
|
Original creator: https://www.ibm.com/developerworks/mydeveloperworks/profiles/user/dgibson91 |
|
|
The newer location is here: https://www.ibm.com/developerworks/forums/thread.jspa?messageID=14754800 |
|
|
I think the source may have been here: http://forum.bigfix.com/viewtopic.php?id=5512 |
|
|
This is based on a .bes file I downloaded from somewhere. I need to re-locate the source so I can cite it. |