Does Microsoft audit small companies?

Audits concentrate on organizations with significant deployments, but any company can receive a letter. The preparation cost is the same regardless of size — and smaller estates take days, not months.

Do OEM and retail keys count as valid licenses in an audit?

Yes. Auditors accept genuine OEM and retail licenses with proof of purchase. Keep invoices and key emails; they are your entitlement evidence.

What happens if an audit finds unlicensed installs?

Typically you purchase the missing licenses retroactively, sometimes at list price, and may face penalties depending on the finding. Voluntarily remediating before an audit is always cheaper.

Can I use OEM keys for office desktops?

For fixed workstations that will never move, OEM is a legitimate and budget-friendly choice. For laptops and frequently refreshed hardware, retail or volume rights fit better.

How long should we keep license records?

For the life of the device plus the audit statute window in your jurisdiction — as a rule of thumb, seven years, aligned with financial record retention.

How to Prepare for a Microsoft SAM Audit: A Practical Checklist