How to Activate Windows Without an Internet Connection (2026 Guide)

Air-gapped lab machines, secure sites, factory-floor PCs, servers behind a strict egress firewall — there are plenty of legitimate reasons a Windows box needs a valid licence but can’t phone home. The good news is that Microsoft still fully supports offline activation. The bad news is that the method most of us memorised over the last two decades no longer exists.

If you have ever activated Windows by dialling an automated 0800 number and typing in a long numeric Installation ID, stop looking for that phone number. Microsoft retired telephone-based activation automation on 3 December 2025. The Installation ID / Confirmation ID exchange it powered is still very much alive — it just happens through a browser now.

Here is how offline activation actually works in 2026, for home users and for IT teams.

Before you start

You will need:

• A genuine product key — retail, OEM, or volume licence. Offline activation validates a real licence; it does not conjure one. If you don’t have a key, buy one first.
• A second device with internet access — a phone, a tablet, another laptop. The machine being activated stays offline; something has to reach Microsoft’s portal on its behalf.
• Local administrator rights on the offline machine.
• A Microsoft account to sign in to the portal. Personal accounts, work or school accounts, Microsoft Entra ID and Azure Government tenants are all accepted. Signing in does not tie the licence to that account — it only proves you’re a real person accessing a secure portal.

Install the key first if you haven’t already. From an elevated Command Prompt:

slmgr /ipk XXXXX-XXXXX-XXXXX-XXXXX-XXXXX

Windows will try to activate online, fail, and fall back to letting you do it manually. That’s expected.

Method 1: Settings → Automated Help (Windows 11, builds 26200.8973 / 26100.8973 and newer)

This is the cleanest route on a current Windows 11 install.

1. On the offline PC, go to Settings → System → Activation.
2. Select Automated Help. Your Installation ID is displayed on screen — a long numeric string, usually split into nine blocks.
3. On your internet-connected device, open the Product Activation Portal at https://aka.ms/WindowsActivate.
4. Clear the CAPTCHA and sign in with your Microsoft account.
5. Choose Activate a Microsoft Product → Windows → Windows 11.
6. Type in the Installation ID and select Submit. The portal returns a Confirmation ID.
7. Back on the offline PC, select Enter Confirmation ID, type it in, and select Activate Windows.

That’s it. If the offline machine is running an older build, the same screen is labelled Activate by Phone instead of Automated Help, and it will ask you to pick a country or region first. Pick anything — you still won’t be calling anyone. Ignore the phone number the dialog offers — Microsoft’s own guidance on that screen is now “don’t call the telephone number.”

Method 2: The slmgr command line

Faster if you’re comfortable in a terminal, and the only sensible option on Server Core.

Open Command Prompt as administrator on the offline machine and run:

slmgr /dti

A dialog shows your Installation ID. Write it down or photograph it.

Take that to https://aka.ms/WindowsActivate on your connected device, sign in, submit the ID, and collect the Confirmation ID. Then, back on the offline machine:

slmgr /atp <ConfirmationID>

Enter the Confirmation ID as one continuous string — no spaces, no hyphens, no brackets. This is where most failures come from.

Confirm the result with:

slmgr /dli

You want to see “Licensed” in the status line.

Method 3: SLUI 4 (legacy builds only)

The old muscle-memory command slui 4 still opens the offline activation wizard on older builds. Microsoft has flagged that from build 26200.7922 onwards SLUI may no longer give the expected experience, so treat this as a fallback for legacy machines rather than your first move. The Installation ID it produces is identical, and it goes to the same portal.

For IT teams: activating fleets with no internet

Individually walking a Confirmation ID to fifty machines is nobody’s idea of a good afternoon. Volume licensing has three offline-friendly options.

MAK proxy activation with VAMT

The Volume Activation Management Tool collects Installation IDs from your clients, submits them to Microsoft in bulk, and pushes the returned Confirmation IDs back down. Only the VAMT host needs internet access.

For a genuinely isolated network, run two VAMT instances: one inside the isolated segment, one on a connected machine. The isolated instance gathers IIDs and exports them to a .cilx file, you carry that across on removable media, the connected instance runs Acquire confirmation IDs for CILX, and you carry the results back to import and apply. In VAMT, the operation is Activate → Proxy activate → “Apply Confirmation ID, apply to selected machine(s) and activate.”

Check your remaining MAK activation count before you start — select the key and choose Refresh product key data online. Running out of activations halfway through a rollout is a bad day.

Key Management Service (KMS)

A KMS host on your LAN activates clients with no internet at all — the clients only ever talk to the host over TCP 1688, discovered through the _VLMCS._TCP DNS SRV record. Clients use a GVLK and:

slmgr /skms kms.yourdomain.local
slmgr /ato

Two things catch people out. KMS won’t hand out activations until the count threshold is met: 25 for client operating systems, 5 for servers and volume Office. And activation is a 180-day lease with a renewal attempt every 7 days, so a machine that leaves the network permanently will eventually lapse. The KMS host key itself still needs activating once — do that through the same Product Activation Portal.

Active Directory-based activation

If everything is domain-joined, this is the least effort of the lot. Add the Volume Activation Services role to a domain controller, run the Volume Activation Tools wizard, choose Active Directory-Based Activation, and enter your KMS host key. Clients running a GVLK then activate automatically the moment the Software Licensing service starts — no KMS host, no thresholds, no client configuration. Activation persists for up to 180 days away from the domain.

You’ll need Domain Admin and Enterprise Admin rights, since it writes a forest-wide schema object.

Troubleshooting

“Invalid Confirmation ID” — nine times out of ten it’s a stray space or hyphen, or a transcribed digit. Retype it.

0xC004C008 — “the specified product key could not be used.” Typically a KMS host key that has run past its limit (10 activations across no more than six machines). A MAK over its own limit reports 0xC004C020 instead.

0xC004F074 — no KMS host could be contacted. Check the _VLMCS._TCP SRV record, DNS, and TCP 1688. If you’ve reached the host but the count is too low, you’ll see 0xC004F038 instead.

0x8007232B — “DNS name does not exist.” The KMS client can’t find the SRV record. Fix DNS publishing, or point the client manually with slmgr /skms <host>. If you have no KMS host at all, install a MAK with slmgr /ipk instead.

Hardware changes on a digital licence — reactivation after a motherboard swap needs the Activation Troubleshooter, and that genuinely requires the machine to be online at least once. Plan accordingly before you rebuild an air-gapped box.

The short version

Offline activation isn’t dead, it just moved house. Grab your Installation ID with slmgr /dti, exchange it for a Confirmation ID at https://aka.ms/WindowsActivate on any connected device, and apply it with slmgr /atp. For anything above a handful of machines, VAMT proxy activation or AD-based activation will save you a great deal of typing.