Error 0xC004F038: Unblock Windows KMS Activation

Error 0xC004F038 means: “The count reported by your Key Management Service (KMS) is insufficient.” Your PC is trying to activate against a company server that has not reached the minimum number of machines Microsoft requires, so the activation is refused. In a business, the usual cause is a fleet that is too small, or cloned computers counted as a single one; on a personal PC, this code gives away a volume license key (GVLK) with no KMS infrastructure behind it. Let’s work out which case applies to you in thirty seconds, then apply the right fix.

What does error 0xC004F038 mean?

KMS (Key Management Service) is the activation mechanism for volume licenses: each computer checks in with a KMS server on the local network rather than with Microsoft’s servers. That server does not work one machine at a time: Microsoft imposes a minimum number of machines before it will activate anything. Below that threshold, every client gets code 0xC004F038.

The count only includes unique machine identifiers (CMIDs) that have contacted the host within the last 30 days. Hence the possible causes:

• the fleet really is too small: a deployment that is just getting started, with fewer than 25 computers;
• computers cloned without sysprep /generalize share the same CMID and count as a single machine;
• clients can no longer reach the server (TCP port 1688 closed, _vlmcs._tcp DNS record missing, VPN down): the count falls back below the threshold;
• a KMS server address forced manually on the computer points to a machine that is out of service;
• the PC carries a GVLK where a Retail or OEM key is needed: a reinstalled corporate image, a second-hand PC resold as is, or an “activator” downloaded from the internet.

The fixes, from the simplest to the most drastic

1. Identify the installed key (30 seconds)

Type cmd in the Start menu, right-click “Command Prompt” and choose “Run as administrator”. Enter slmgr /dlv: the window shows the license description and the name of the KMS host being queried.

If the Description line contains VOLUME_KMSCLIENT, your Windows is using a volume license key: go to step 2 on a company network, step 3 otherwise. Our guide to Windows activation errors takes over if the code changes along the way.

2. In a company: the fix happens on the server

No command typed on the client computer will push the count up. Pass these points on to your IT department:

1. on the KMS host, run slmgr /dli and read the “Current count” line: that is the counter holding everything up;
2. regenerate the CMID of cloned computers (sysprep /generalize) so that each one is counted;
3. open TCP port 1688 and check the SRV record: nslookup -type=srv _vlmcs._tcp.yourdomain.local;
4. if the fleet is going to stay below 25 computers, KMS is not the right tool: MAK keys activate one computer at a time, with no threshold.

Your PC is not doomed: it keeps retrying activation automatically during its grace period. As soon as the threshold is reached, a simple slmgr /ato activates it within seconds.

3. On a personal PC: replace the volume license key

With no KMS server on the network — which is the case for every home user — the GVLK will never activate. You need to remove it and install a key that belongs to you, from an administrator command prompt, in this order:

1. slmgr /ckms — removes the KMS server address forced on the computer;
2. slmgr /upk — uninstalls the current product key;
3. slmgr /cpky — clears the leftover key from the registry;
4. slmgr /ipk XXXXX-XXXXX-XXXXX-XXXXX-XXXXX — installs your key;
5. slmgr /ato — starts online activation.

A confirmation appears within a few seconds. If activation fails even though the key is valid, type slui 4: Windows switches to phone activation, which is free and gets past many server-side refusals. You can also do all of this from Settings > System > Activation; the details are in our guide to activating Windows 11.

4. Run the activation troubleshooter

Open Settings > System > Activation > Troubleshoot (the button only appears if Windows is not activated and you are signed in as an administrator). It works well after a motherboard replacement, when a digital license is linked to your Microsoft account. Let’s be honest, though: faced with a volume license key and no server, it will find nothing. Run it after step 3, not before.

5. If an “activator” has been used on this machine

The utilities circulating on the internet install a GVLK and emulate a local KMS server. The day that fake server stops responding — an update, an antivirus, a deleted scheduled task — you get exactly this code. It is illegal and unstable, and this kind of file is a classic vector for malware. The only clean way out: uninstall the utility, run slmgr /ckms then slmgr /upk, and install a genuine Windows 11 key.

If nothing has worked

Let’s be frank: some keys cannot be brought back to life. A key revoked by Microsoft, an OEM key tied to a motherboard that no longer exists, a Retail key already installed on too many machines, a GVLK obtained through an unauthorized channel: they will stay refused, whatever command you type. slmgr cannot repair a right of use that does not exist.

There are two ways out, and only two:

• Microsoft support, if your situation is legitimate: a volume licensing agreement for your administrator to check, or a Retail key with proof of purchase;
• a new license, if the current key was never yours. Our Microsoft licenses are genuine and pre-owned: reselling them is legal in Europe under the CJEU’s UsedSoft ruling (C-128/11). Key delivered by email within minutes, lifetime replacement of a defective key, and email support 7 days a week with a reply within 2 hours on average.

Frequently asked questions

How many machines does a KMS server need to activate Windows 11?

25 separate client computers. The count only adds up unique machine identifiers that have contacted the host within the last 30 days. For Windows Server, as for Office under volume licensing, the threshold drops to 5.

Can error 0xC004F038 go away on its own?

Yes, in a company during a deployment: as soon as the 25th computer contacts the server, the clients that were waiting activate themselves at their next automatic attempt. No, on a standalone PC without KMS: it will keep coming back until the volume license key has been replaced.

How is it different from errors 0xC004F035 and 0xC004F039?

They are three neighbors from the same “volume licensing” family. Error 0xC004F035 means the machine is not eligible for a volume license key, because it lacks a qualifying original operating system. Error 0xC004F039 reports that the KMS service contacted is not enabled on the server side. 0xC004F038 is the more favorable case: the server answers, only its count is too low.

🔑 Our best-selling licenses right now

Microsoft Office 2024 Pro Plus€24.90 · key by email within minutesSee the offerWindows 11 Professional€9.90 · key by email within minutesSee the offerWindows 11 Home€8.90 · key by email within minutesSee the offer

Genuine Microsoft licenses · lifetime replacement guarantee · email support 24/7