How to fix Windows activation error 0x8007232B?

Error 0x8007232B, "DNS name does not exist", means Windows is set up for company activation through a Key Management Service (KMS) host and cannot find one. On a home PC that almost always means the wrong key or edition is installed. Run slmgr /dli first to see which licence Windows holds.

Facts checked on 15 October 2026. Steps written for Windows 11 (25H2 and 26H2) and Windows 10 22H2.

What Windows activation error 0x8007232B means

Microsoft's IT troubleshooting page names the error "0x8007232B (DNS name does not exist)" and says it occurs when you try to activate Windows by using Key Management Services (KMS). It typically means the KMS client cannot locate a valid KMS host through the automatic discovery process.

KMS is how companies, schools and cloud providers activate many PCs at once. The PC holds a public KMS client setup key and asks DNS for a _vlmcs service record that points to the organisation's KMS host on port 1688. When DNS has no such record, the activation stops with this code. A home network never has one, so a home PC with a KMS client key always fails this way.

Why error 0x8007232B appears, from most to least common

The code is about where the PC looks for activation, not about damaged files. Find your row and go to its fix.

Older guides said the code means the KMS server is down. That is only one of the company causes. On a home PC there is no KMS server to be down, and the fix is a key that activates online.

How to fix Windows activation error 0x8007232B

Fix 1 shows which licence Windows holds, in one command. Fixes 2 and 3 are for home PCs. Fix 4 is for work and school PCs. Fixes 5 to 7 are for the IT admin who runs the KMS host, and follow Microsoft's own order. Fix 8 is for a genuine purchase that still fails. Repair tools do not change the key or DNS, so they are left out.

Fix 1. Check which licence Windows holds with slmgr /dli

2 minutesNo riskEveryone, before anything else. It takes one minute and tells you which fix is yours.

0x8007232B appears only when Windows tries KMS activation, so the licence channel shows at once whether a KMS client key is in place. The edition in the same box shows whether an Enterprise install is the reason.

1. Open Start, type cmd, right-click Command Prompt and select Run as administrator.
2. Select Yes in the User Account Control window.
3. Type slmgr /dli and press Enter.
4. Wait for the Windows Script Host box and read the Name and Description lines.
5. Select OK to close the box.

If the Name line says Enterprise or Education and you bought Home or Pro, the install media was the wrong edition. Your own key will not fit until the edition matches.

Fix 2. Replace the KMS client key with your own product key for the same edition

3 to 5 minutesNo riskHome PC with VOLUME_KMSCLIENT in Fix 1, and you have a genuine key: a box card, a Store email or a COA sticker on a PC that came with Windows.

Microsoft's page for this code says to enter a product key that matches the edition of Windows on your device. A retail or OEM key overwrites the KMS client key, and Windows then activates online with Microsoft instead of looking for a KMS host.

1. Open Settings > System > Activation (Windows 10: Settings > Update & Security > Activation).
2. Select Change product key. Windows may ask for an administrator password.
3. Type your 25-character key and select Next.
4. Select Activate and wait for the page to update.
5. Run slmgr /dli again: the channel should now say RETAIL or OEM.

From Command Prompt as administrator, the same takes two commands and gives a clearer message when it fails.

Install your key and activate online

slmgr /ipk XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
slmgr /ato

Fix 3. Restore your digital licence with the Activation troubleshooter

5 to 10 minutesNo riskHome PC that was activated before, from a free upgrade, a Microsoft Store purchase or a preinstalled licence, and you have no key to type.

A digital licence is tied to the PC's hardware and often to your Microsoft account. While a KMS client key is installed, Windows keeps looking for a KMS host instead. The troubleshooter looks up the licence for this device and can put it back.

1. Check that the PC is online, because activation needs a working connection: How to check your internet connection in Windows
2. On Windows 11, Microsoft's first advice is the automated Windows Activation troubleshooter in the Get Help app. You can also open Settings > System > Activation and select Troubleshoot.
3. On Windows 10, open Settings > Update & Security > Activation and select Troubleshoot.
4. If it offers to sign in, use the Microsoft account you used on this PC before.
5. If it finds the licence, follow its prompt to activate.

Fix 4. Work or school PC: connect to the work network or VPN, then activate

5 minutesNo riskThe PC belongs to an employer or school, shows VOLUME_KMSCLIENT, and is used at home or on the road.

Microsoft says this error appears when you try to activate a work device that is not connected to your workplace's network. The KMS host and its DNS record live inside that network, so the PC can find them only from there or through the company VPN.

1. Connect the PC to the office network, or start the company VPN.
2. Open Command Prompt as administrator (Fix 1).
3. Type slmgr /ato and press Enter.
4. If the same code comes back, take a screenshot and send it to your IT team with the PC name from Settings > System > About.

Try activation again once you are on the work network

slmgr /ato

Microsoft adds that if you are on the work network and still see the error, the network settings may need a change, and your organisation's support person should check them. If your organisation has no support person, Microsoft says you may need to enter your product key again (Fix 2).

Fix 5. IT admin: point the client to the KMS host and open port 1688

10 minutesLow riskYou run the KMS host. Some clients activate and others show 0x8007232B, or a client was once set to a host name by hand.

Microsoft lists a wrong or invalid KMS host name and firewall rules that block DNS as common causes. Clearing the old setting and naming the host directly skips the DNS search, and a port test shows whether traffic gets through.

1. On the client, open Command Prompt as administrator.
2. Run cscript c:\windows\system32\slmgr.vbs /dlv and check that a correct KMS client setup key for this edition is installed.
3. Run cscript c:\windows\system32\slmgr.vbs /ckms to clear any old KMS host setting.
4. Run cscript c:\windows\system32\slmgr.vbs /skms with your KMS host's full name and port, as below.
5. Run cscript c:\windows\system32\slmgr.vbs /ato to activate.
6. If it still fails, test the port from the client with PsPing from Microsoft Sysinternals, and allow TCP and UDP port 1688 in every firewall between client and host, Windows Firewall included.

Clear the old host, set the right one and activate

cscript c:\windows\system32\slmgr.vbs /ckms
cscript c:\windows\system32\slmgr.vbs /skms kms01.example.local:1688
cscript c:\windows\system32\slmgr.vbs /ato
psping <KMS host IP>:1688

Fix 6. IT admin: check that the KMS host publishes its _vlmcs SRV record in DNS

15 to 30 minutesRead the warningEvery new client fails with 0x8007232B, and naming the host by hand in Fix 5 works.

Microsoft's cause for this error is that the KMS client cannot find the SRV resource records for the KMS host in DNS. A KMS host registers that record every 24 hours unless DNS publishing is turned off or the client's DNS server cannot see it.

1. On a client, run nslookup -type=all _vlmcs._tcp>kms.txt and open kms.txt.
2. A working record looks like _vlmcs._tcp.contoso.com SRV service location, with port = 1688 and the host name. No such entry means DNS has no record.
3. On the KMS host, run ipconfig /all and check that every DNS Servers address is correct.
4. Back up the registry first: Back up the registry before editing it
5. On the KMS host, open regedit and go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform.
6. Check DisableDnsPublishing. 0 or missing means the host publishes the record every 24 hours; 1 means it does not.
7. If you change anything, restart the KMS host, run ipconfig /flushdns, then run slmgr /ato on the client.

Look for the KMS record from a client

nslookup -type=all _vlmcs._tcp>kms.txt
notepad kms.txt

Fix 7. IT admin with no KMS host: activate with a MAK key instead

5 minutes per PCNo riskYour organisation installed volume media but runs no KMS host and cannot use the Azure KMS service.

Microsoft's first step for this error is to make sure a KMS host exists. Its alternative, when one cannot be installed, is a Multiple Activation Key (MAK), which activates each PC online with Microsoft and needs no KMS host.

1. Get the MAK for the right edition from your organisation's volume licensing account.
2. Open Command Prompt as administrator on the PC.
3. Install the MAK with slmgr /ipk, as below.
4. Activate with cscript c:\windows\system32\slmgr.vbs /ato.

Install the MAK and activate

slmgr /ipk XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
cscript c:\windows\system32\slmgr.vbs /ato

Fix 8. Contact Microsoft support with proof of a genuine purchase

15 to 30 minutesNo riskYou bought Windows from Microsoft or an authorised retailer, and Fixes 2 and 3 did not activate it.

Microsoft's IT page ends with this step when every check fails, and its home page sends codes it cannot solve to customer support. Support can look up a purchase and the state of a key, which nothing on the PC can do.

1. Collect the proof: the order number or email, the account used to buy, and a photo of any key card.
2. Take a screenshot of the Activation page and of the slmgr /dli box.
3. Check the PC's date, time and time zone: How to fix the date and time in Windows
4. Open support.microsoft.com/contactus in a browser and choose Windows activation.
5. Say in one message that the error is 0x8007232B and which channel slmgr /dli showed.

If error 0x8007232B is still there

When none of the fixes worked, collect these facts before you ask your IT team or Microsoft. They show at once whether the problem is the key, the network or DNS.

How to avoid error 0x8007232B next time

On a home PC, the error starts with volume media or a volume key that should never have been there. On a company network, it starts with DNS or a firewall.

Frequently asked questions

What does error code 0x8007232B mean?

It means Windows tried to activate through a Key Management Service (KMS) host and could not find one. Microsoft's message is "DNS name does not exist." The PC asks DNS for the KMS host's service record and gets no answer. Nothing on the PC is damaged. On a home PC it means a KMS client key or an Enterprise edition is installed; on a work PC it means the KMS host cannot be reached.

How do I fix 0x8007232B on Windows 11?

Run slmgr /dli in Command Prompt as administrator. If it shows VOLUME_KMSCLIENT on a home PC, open Settings > System > Activation > Change product key and enter your own key for the same edition, or run the Activation troubleshooter in the Get Help app to restore your digital licence. On a work PC, connect to the work network or VPN and run slmgr /ato. These are Fix 1 to Fix 4.

Is 0x8007232B different on Windows 10?

No. The code, its meaning and the fixes are the same on Windows 10 22H2. Only the menu path differs: Settings > Update & Security > Activation instead of Settings > System > Activation. Windows 10 left support on 14 October 2025, so it gets no more security fixes, but activation with a valid key still works the same way.

Why do I get 0x8007232B after a clean install?

Most often because the install media was an Enterprise or volume edition, or no key was asked for during setup and a KMS client key was used instead. Microsoft names an Enterprise key on Windows 11 Home or Pro as a cause of this code. Check the edition in Settings > System > About. If it is not the one you bought, reinstall from Microsoft's own media, pick your edition, and activate with your key.

What is a KMS host and do I need one?

A KMS host is a server inside a company, school or cloud network that activates many Windows PCs for that organisation. Clients find it through a DNS record on port 1688. A home user never needs one and cannot use one legally without a volume licence. If your PC asks for a KMS host, it needs your own retail or OEM key or digital licence instead.

What does "License Activation (slui.exe) failed with the following error code: hr=0x8007232B" mean?

It is the same error written to the Application log in Event Viewer. slui.exe is the Windows activation client, and it tried to activate in the background and could not find a KMS host. The fixes are the same as for the message on the Activation page. We could not confirm the exact event ID from Microsoft's documentation, so search the log for the text and the code.

Can I use a generic or default product key to fix 0x8007232B?

No. Microsoft's public KMS client setup keys only activate against a KMS host, so on a home PC they cause this very error. Older guides suggested a default key, and this page no longer does. Use the key you bought or your digital licence, as in Fix 2 and 3.

I used a free activator before and now see 0x8007232B. What now?

Activator tools usually install a KMS client key and point Windows to an unofficial host. When that host is gone or blocked, Windows shows this error. Such tools change system files and run with full rights, so this page does not link to any. Remove the tool, run a full Microsoft Defender scan, then enter a genuine key or buy a licence from Settings > System > Activation.

Is 0x8007232B the same as 0xC004F074?

They are related. Microsoft lists 0x8007232B together with 0xC004F074, 0xC004F038 and 0x8007007B on its activation errors page. The advice is the same for all four: a key that matches the edition, or a connection to the work network. 0x8007232B has its own meaning on Microsoft's IT page: no KMS host was found in DNS. If your screen shows 0xC004F074 instead, start with the same Fix 1 and read that code's own guide.

Some messages say "The file name, directory name, or volume label syntax is incorrect". Is that this error?

Older reports show 0x8007232B with that text, but Microsoft's current documentation gives the message as "DNS name does not exist." We could not confirm the other wording in Microsoft's pages. If the code on your screen is 0x8007232B, the meaning and the fixes on this page apply whatever text appears next to it.