This article has multiple issues. Please help or discuss these issues on the . () Ambox current red.svg

This article needs to be updated. Please update this article to reflect recent events or newly available information. (November 2012)

Windows Genuine Advantage (WGA) is an anti- system created by that enforces online validation of the licensing of several when accessing several services, such as , and downloading Windows components from the Microsoft Download Center. In Windows 7, WGA is renamed Windows Activation Technologies. WGA consists of two components: an installable component called WGA Notifications that hooks into and validates the Windows license upon each logon and an that checks the validity of the Windows license when downloading certain updates from the Microsoft Download Center or . WGA Notifications covers and later, with the exception of and . The ActiveX control checks licenses as well.

WGA also advertises the latest service pack, Service Pack 3, for Windows XP, which requires manual intervention to disable. Previously voluntary, it became mandatory for use of these services by July 2005.

Despite its name it does not actually evaluate the integrity or security of any computer.



Windows Genuine Advantage Notification in Windows XP

The WGA validation process validates the present installation of Windows and its license key against the detected and determines if the software was licensed from Microsoft. It is accessible by either a stand-alone program, a Netscape-compatible web browser , or as an control within , the latter of which is relevant to any attempt to access Microsoft updates via its . It includes the following steps:

  • Upon their first visit to Windows Update or certain updates on the Microsoft Download Center, users receive a message requiring them to validate their copy of Windows by downloading an control which checks the authenticity of their Windows software. If successful in validating Windows, it stores a license file on the PC for future verification.
  • After successful validation, the regular update download can continue.
  • If the software decides the instance of Windows does not have a valid license, WGA displays a specific notice to the user and prevents non-critical updates from being downloaded from Microsoft. This includes changing the wallpaper to black and displaying a watermark in the bottom-right of the screen.

The ActiveX control is downloaded on the first validation and when a new version is available, but the validation itself can be performed any time the user connects to a Microsoft Website to update.

On without service packs, WGA validation failure has a greater impact. In addition to persistent notification and the disabling of non-critical updates, WGA also disables , , and . The user is given a grace period in which to then pass validation, after which most of the operating system is disabled and Windows reverts to reduced functionality mode. This behavior however has been removed in in favor of prominent notices on systems believed unlicensed.


WGA Validation Tool[]

When a user installs Windows Genuine Advantage, an add-on is installed labeled "Windows Genuine Advantage". In early releases the tool could be readily disabled with the IE Add-on Management feature. A Windows was added by later updates, causing this option to be unavailable by default, but still accessible if the policy were removed. As of July 2006, the latest update blocks management by other means.

The program uses either a stand-alone program to generate a key or an control to discover whether the is valid; either way an Internet connection is required. If WGA determines that a user's copy of Windows is but was installed from seemingly legitimate media (i.e., the / and holographic emblem present on real copies of Windows seems genuine), then Microsoft will supply the user with a new CD/DVD. However, this policy is only true for Windows XP. Newer versions of Windows will still require the user to purchase a new copy. Microsoft also offers discounts to people who want to purchase a legitimate copy of Windows but do not have a valid CD. Microsoft has indicated that they will continue to deliver critical security updates through their Automatic Updates service as well as via the Microsoft Download Center, so that all systems, including those that fail to pass validation, will still continue to receive critical security updates.

The company has made installation of Windows Genuine Advantage a requirement for use of the and websites, in part to be sure that customers who use support resources of the company are aware when their software is unlicensed. According to Microsoft themselves, it is legal to run Microsoft Windows without Windows Genuine Advantage[]. However, since non-critical Windows updates are not presented by Automatic Updates, installation of WGA is required for installation of such non-critical updates, which are only available through Windows Update or the Microsoft Download Center.

WGA Notifications[]

Ambox current red.svg

This section's may be compromised due to out-of-date information. Please update this article to reflect recent events or newly available information. (April 2009)

On April 25, 2006, Microsoft began distributing Windows Genuine Advantage Notifications as "critical update" to Windows users. For Windows 7, has the same function. Back in 2006, users with copies the WGA believed to be unlicensed were exposed to alerts at startup, login, and during use of the Windows OS, stating that they do not have a genuine copy of Windows. Users with legitimate copies are not supposed to see the alerts (although some do anyway). On May 23, 2006, Microsoft updated the program, closing some forms of circumvention, but reportedly not all. It was updated again on May 30, June 6 and June 27, 2006, though some forms of circumvention are still usable. The latest versions do not roll out worldwide at the same time: the dates given are the earliest dates on which the versions appeared, so the actual version being offered in some places will be an earlier version than the latest release. It is still possible to opt out of receiving this update using the "do not show" option at the Windows Update site (Windows XP), and the "Hide" option in the right-click menu of Windows Update in Control Panel (Windows Vista/7/8). In addition to these notifications, Windows Genuine Advantage will also notify users with the message "This version of Windows XP is no longer secure" if users on an XP Operating System are not using Service Pack 3, and it will provide a link to help users to update their systems to the new service pack.

The version of Windows Genuine Advantage Notifications released November 29, 2006, had a changed install process to inform the user of what the program does, and can also be set to automatically update to newer versions of Windows Genuine Advantage Notifications. It also informs users that may have a non-genuine version of Windows why their Windows version isn't being reported as genuine. However, unlike previous releases, it started being only automatically delivered to Windows machines using four widely distributed product keys.

The latest update (version 1.9.0040.0) was released on March 24, 2009.

WGA Validation Library[]

Microsoft includes the Windows Genuine Advantage Validation Library in several products, such as Windows validation tool or , to check the validation about all Windows software. As of version 7, no longer requires the user to pass a Windows Genuine Advantage test in order to download or install the software.

The WGA Validation Library is also included in the 2.0 and validate the Windows installation whether it is legitimate or not. The program will stop working after 30 days once it failed the validation process.

The information is then used in the WGA Library to check for overuse of license keys.


In September 2005, Microsoft filed lawsuits against a number of companies that sold unauthorized copies of software based on information from users who were told they have software by the Windows Genuine Advantage application.

On May 4, 2006, Microsoft announced lawsuits for allegedly distributing unauthorized copies of Windows against eDirectSoftware of Montana, and Chicago-area resellers Nathan Ballog and Easy Computers.

Notifications and firewalls[]

Some , though not one embedded in Windows, may alert on the method by which wgatray.exe is started; in the case of Outpost firewall, it is identified as a "hidden process". The wgatray.exe process itself can be firewall blocked, without apparent problems.

A tool has been released by a firewall vendor to prevent WGA Notifications transmitting information from one's PC.

Data collected[]

Through Windows Genuine Advantage, Microsoft collects the following data:

  • Computer make and model
  • , make, version, and date
  • (GUID), a number WGA assigns to the Windows installation
  • Windows version, product ID (PID), and
  • Windows or registration key
  • WGA validation and installation results

WGA in China[]

An example of a Simplified Chinese WGA notice.

On October 20, 2008, many users of Windows XP in China received a black desktop, as Microsoft introduced its WGA system for Chinese language systems in an effort to combat copyright violation, which is extremely common in China. Since the majority of users in China run an unlicensed copy of Windows, many users have experienced what is described as a "black screen syndrome", where the operating system changes the desktop background to a black screen, as well as displays constant warning messages. Some users have even reported the disabling of Office programs such as Microsoft Word, PowerPoint and Outlook.

According to various polls carried out by Chinese portals such as,,, and many others, a large number (over 60% of those surveyed) of Chinese Internet users are hostile to Microsoft Windows Genuine Advantage (WGA) and Office Genuine Advantage (OGA).


Time bomb[]

Even if WGA does not really make the program unusable, no updates except critical ones can be downloaded from Microsoft. Rather than just disallowing updating, originally ran in reduced-functionality mode if found by WGA to be compromised, which has made some people compare WGA to .Windows Vista SP2 has removed this behavior and reverted to the nag-only methods of Windows XP.

Spyware accusations[]

The notification tool has been accused of -like behavior, "" on a daily basis. Microsoft subsequently admitted the behaviour, but denied that it amounted to spyware. Following pressure, Microsoft announced that in future the tool would only phone home once every two weeks, instead of every day. Microsoft has also provided removal instructions for the pilot version of WGA.

Despite this, Microsoft was sued under anti-spyware statutes over WGA's non-disclosed "phone home" behaviour. The lawsuit has since been dismissed.

False positive rate[]

The WGA program can produce (incorrectly identifying a genuine copy of Windows as "not genuine"). This can happen for any number of reasons such as failed updates, etc. Microsoft has established a forum to help users encountering problems. In February 2007, a "Not Sure" section was added to the program, in case of an incorrect reading.

According to an editorial, WGA reported around 22% of 500 million Windows computers as failing the test; of these less than 0.5% were due to unauthorized software, with the balance (over 20%, or 90% of all positives) related to edge cases. Microsoft "refused to comment on the rate of pure false positives" beyond saying it was "under 1%" (or as stated, at most around 5 million users affected).

False negatives[]

On June 18, 2007, news surfaced that it is possible to positively validate as a "Genuine Microsoft Product" user (and as a result be able to download certain software from 's official website) using with and , running on , without even having a -family system installed.

Major failures in WGA system[]

On October 5, 2006, a WGA failure occurred, incorrectly flagging some systems as being non-genuine.

On August 25, 2007, the Microsoft WGA servers suffered an outage, resulting in many legitimate copies of Windows XP and Vista being marked as counterfeit. The issue was solved about 12 hours later. According to Microsoft, "fewer than 12,000 systems were affected worldwide."

On July 18, 2008, reports of Microsoft's WGA and OGA servers being offline surfaced again. Microsoft later responded that only offline verification was temporarily down.

See also[]


  1. . . Retrieved 2009-04-13. 
  2. ^ , retrieved June 18, 2007
  3. , retrieved June 13, 2006
  4. , retrieved June 13, 2006
  5. Announcement on usenet entitled "Windows Genuine Advantage – warning appears on activated machine" by Rubert Sland
  6. , retrieved June 13, 2006
  7. , retrieved December 3, 2006
  8. (Press release). Archived from on September 10, 2012. Retrieved June 13, 2006. 
  9. , retrieved June 13, 2006
  10. , retrieved May 2012
  11. , retrieved October 20
  12. Dvorak, John C. (October 16, 2006). . PC Magazine
  13. . Fox News. October 19, 2006. 
  14. . Retrieved 2008-01-01. 
  15. , retrieved June 13, 2006
  16. , retrieved June 13, 2006 June 16, 2006, at the .
  17. Brian Livingston (June 15, 2006). . Newsletter. Windows Secrets. Retrieved 2007-03-03. 
  18. , retrieved June 13, 2006
  19. Lauren Weinstein's Blog – Microsoft responds regarding Windows XP gr update vs Spyware, retrieved June 13, 2006
  20. , retrieved June 13, 2006 June 15, 2006, at the .
  21. . Microsoft. July 12, 2006. 
  22. , retrieved June 29, 2006
  23. , retrieved August 4, 2010
  24. , retrieved June 6, 2009.
  25. Fisher, Ken (January 24, 2007). . . . Retrieved October 31, 2017. 

External links[]