Error 0xC004E002 during activation for Windows

Applies to: Windows 8.1Windows 8.1 EnterpriseWindows 8.1 Pro More

Symptoms


When you try to activate Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012, Windows 8.1, or Windows Server 2012 R2, you may receive one of the following error messages:
Code: 0xC004C003

Description: The activation server determined that the specified product key has been blocked.
Code: 0xC004E002

Description: The Software Licensing Service reported that the license store contains inconsistent data.

Cause


This issue occurs because the incorrect permissions are set on the Tokens.dat file or this file is corrupted.

Resolution


To resolve this issue, try the following methods in order.

Method 1: Set the correct permissions to the Tokens.dat file

  1. Click Start, and then type cmd in the Search box.
  2. Right-click cmd, and then click Run as Administrator.
  3. At the command prompt, type the following command depending on the operating system and then press ENTER:


    For Windows Vista or Windows Server 2008:
    icacls %windir%\serviceprofiles\networkservice\appdata\roaming\microsoft\softwarelicensing /grant "BUILTIN\Administrators:(OI)(CI)(F)" "NT AUTHORITY\SYSTEM:(OI)(CI)(F)" "NT Service\slsvc:(OI)(CI)(R,W,D)" 
    The correct permissions for tokens.dat should look like this output from icacls:

    tokens.dat NT AUTHORITY\SYSTEM:(I)(F)
                    BUILTIN\Administrators:(I)(F)
                    NT SERVICE\SLSVC:(I)(R,W,D)

    For Windows 7 or Windows Server 2008 R2:
    icacls %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform /grant "BUILTIN\Administrators:(OI)(CI)(F)" "NT AUTHORITY\SYSTEM:(OI)(CI)(F)" "NETWORK SERVICE:(OI)(CI)(F)" 
    The correct permisions for token.dat should look like this output from icacls:

    tokens.dat NT AUTHORITY\SYSTEM:(I)(F)
                    BUILTIN\Administrators:(I)(F)
                    NT AUTHORITY\NETWORK SERVICE:(I)(F)

    For Windows 8, Windows Server 2012, Windows 8.1, or Windows Server 2008 R2:
    icacls "%windir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\WSLicense" /grant "BUILTIN\Administrators:(OI)(CI)(F)" "NT AUTHORITY\SYSTEM:(OI)(CI)(F)" "NETWORK SERVICE:(OI)(CI)(F)" 
    The correct permissions for tokens.dat should look like this output from icacls:

    tokens.dat NT AUTHORITY\SYSTEM:(I)(F)
                    BUILTIN\Administrators:(I)(F)
                    NT SERVICE\WSService:(OI)(CI)(R,W,D)
  4. Close the Command Prompt window.
Notes
  • You must type this command from an elevated command prompt.

Method 2: Rename the Tokens.dat file

  1. Click Start, and then type cmd in the Search box.
  2. Right-click cmd, and then click Run as Administrator.
  3. At the command prompt, type the following command and then press ENTER.

    For Windows Vista or for Windows Server 2008
     
    net stop slsvc 
    For Windows 7 or for Windows Server 2008 R2
    net stop sppsvc 
    For Windows 8, Windows Server 2012, Windows 8.1, or Windows Server 2008 R2
    net stop sppsvc 
    Note: If you receive a message that asks whether you want to continue with this operation, type Y and then press ENTER.
  4. Type the following command and then press ENTER.

    For Windows Vista or for Windows Server 2008
    cd %windir%\serviceprofiles\networkservice\appdata\roaming\microsoft\softwarelicensing 
    For Windows 7 or for Windows Server 2008 R2
    cd %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform 
    For Windows 8, Windows Server 2012, Windows 8.1, or Windows Server 2008 R2:
    cd %windir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\WSLicense 
  5. Type the following command and then press ENTER:
    ren tokens.dat tokens.bar 
  6. Type the following command and then press ENTER:

    For Windows Vista or Windows Server 2008
    net start slsvc 
    For Windows 7 or Windows Server 2008 R2
    net start sppsvc 
    For Windows 8, Windows Server 2012, Windows 8.1, or Windows Server 2008 R2:
    net start sppsvc 
  7. Type the following command and then press ENTER:
    cd %windir% \System32 
  8. Type the following command and then press ENTER:
    cscript slmgr.vbs -rilc 
  9. Restart the computer two times for the changes to apply.

Did this fix the problem?

  • Check whether the problem is fixed. If the problem is fixed, you are finished with this section. If the problem is not fixed, for Windows 7 or Windows Server 2008, you can contact support. Assisted support is no longer available for Windows Vista.