Windows Genuine Advantage — BrandWiki

Windows Genuine Advantage

Overview

developer	Microsoft
latest release version	1.9.42.0
latest release date	June 26, 2009
operating system	Windows XP to Windows 7
platform	IA-32, x86-64
genre	Copy protection, digital rights management
license	Proprietary (same as Windows)

Windows Genuine Advantage (WGA) is an anti-infringement system created by Microsoft used to validate the licences of several Microsoft Windows operating systems upon accessing services such as Windows Update and Microsoft Download Center.

It consisted of two components: an installable component called WGA Notifications that hooks into Winlogon and validates the Windows license upon each logon and an ActiveX control that checks the validity of the Windows license when downloading certain updates from the Microsoft Download Center or Windows Update.

WGA Notifications covered Windows XP and later, with the exception of Windows Server 2003 and Windows XP Professional x64 Edition.

The ActiveX Control checked Windows 2000 Professional licenses as well.[1]

In Windows 7, WGA was renamed Windows Activation Technologies.[2]

Despite its name, it does not actually evaluate the integrity or security of any computer.[3]

Software

WGA Validation Tool

When a user installs Windows Genuine Advantage, an Internet Explorer add-on is installed labeled "Windows Genuine Advantage".

In early releases, the tool could be readily disabled with the IE Add-on Management feature.

A Windows Group Policy was added by later updates, causing this option to be unavailable by default, but still accessible if the policy were removed. As of July 2006, the latest update blocks management by other means.

The program uses either a stand-alone program to generate a key or an ActiveX control to discover whether the license key is valid; either way, an Internet connection is required.

On Windows XP, if WGA determines that a user's copy of Windows is unauthorized, but was installed from seemingly legitimate media (i.e., the CD/DVD and holographic emblem present on real copies of Windows seems genuine), then Microsoft will supply the user with a new CD/DVD. However, newer versions of Windows will still require the user to purchase a new copy. Microsoft also offers discounts to people who want to purchase a legitimate copy of Windows but do not have a valid CD. Microsoft has indicated that they will continue to deliver critical security updates through their Automatic Updates service as well as via the Microsoft Download Center, so that all systems, including those that fail to pass validation, will still continue to receive critical security updates.

The company has made installation of Windows Genuine Advantage a requirement for use of the Windows Update and Microsoft Update websites, in part to be sure that customers who use support resources of the company are aware when their software is unlicensed. According to Microsoft themselves, it is legal to run Microsoft Windows without Windows Genuine Advantage.

However, since non-critical Windows updates are not presented by Automatic Updates, installation of WGA is required for installation of such non-critical updates, which are only available through Windows Update or the Microsoft Download Center.

WGA Notifications

On April 25, 2006, Microsoft began distributing Windows Genuine Advantage Notifications[4] as "critical update" KB905474 to Windows users. For Windows 7, KB971033 has the same function.[5] Back in 2006, users with copies the WGA believed to be unlicensed were exposed to alerts[6] at startup, login, and during use of the Windows OS, stating that they do not have a genuine copy of Windows. Users with legitimate copies are not supposed to see the alerts (although some do anyway[7]). On May 23, 2006, Microsoft updated the program, closing some forms of circumvention, but reportedly not all.[8]

WGA Validation Library

Microsoft includes the Windows Genuine Advantage Validation Library in several products, such as Windows validation tool or Windows Media Player 11, to check the validation about all Windows software. As of version 7, Internet Explorer no longer requires the user to pass a Windows Genuine Advantage test in order to download or install the software.

The WGA Validation Library is also included in the Microsoft Security Essentials 2.0 and validate the Windows installation whether it is legitimate or not. The program will stop working after 30 days once it failed the validation process.

The information is then used in the WGA Library to check for overuse of license keys.

Criticisms

Time bomb

Even if WGA does not really make the operating system unusable, no updates except critical ones can be downloaded from Microsoft. Rather than just disallowing updating, Windows Vista originally ran in reduced-functionality mode if found by WGA to be compromised[22][23] if a product has not been considered genuine which has made some people compare WGA to time bomb software.[24][25][26] Windows Vista SP1 and SP2 have removed this behavior and reverted to the nag-only methods of Windows XP.[27]

Spyware accusations

The notification tool has been accused of spyware-like behavior, "phoning home" on a daily basis.[28][29][30] Microsoft subsequently admitted the behaviour, but denied that it amounted to spyware.[31][32] Following pressure, Microsoft announced that in future the tool would only phone home once every two weeks, instead of every day.[33] Microsoft has also provided removal instructions for the pilot version of WGA.[34]

False positive rate

The WGA program can produce false positives (incorrectly identifying a genuine copy of Windows as "not genuine"). This can happen for any number of reasons such as failed updates, etc. Microsoft has established a forum to help users encountering problems.[37] In February 2007, a "Not Sure" section was added to the program, in case of an incorrect reading.[38]

According to an Ars Technica editorial, WGA reported around 22% of 500 million Windows computers as failing the test; of these less than 0.5% were due to unauthorized software, with the balance (over 20%, or 90% of all positives) related to edge cases. Microsoft "refused to comment on the rate of pure false positives" beyond saying it was "under 1%" (or as stated, at most around 5 million users affected).[39]

False negatives

On June 18, 2007, it surfaced that it is possible to positively validate as a "Genuine Microsoft Product" user (and as a result be able to download certain software from Microsoft's official website) using Internet Explorer with IEs4Linux and Wine, running on Linux,[3] without having Windows installed.

Major failures in WGA system

On October 5, 2006, a WGA failure occurred, incorrectly flagging some systems as being non-genuine.[40]

On August 25, 2007, the Microsoft WGA servers suffered an outage, resulting in many legitimate copies of Windows XP and Vista being marked as counterfeit.[41]

The issue was solved about 12 hours later. According to Microsoft, "fewer than 12,000 systems were affected worldwide."[42]

On July 18, 2008, reports of Microsoft's WGA and OGA servers being offline surfaced again. Microsoft later responded that only offline verification was temporarily down.[43]

Windows Genuine Advantage

Features

Software

WGA Validation Tool

WGA Notifications

WGA Validation Library

Circumvention

Notifications and firewalls

Data collected

WGA in China

Criticisms

Time bomb

Spyware accusations

False positive rate

False negatives

Major failures in WGA system

See also

External links

References