RDS License Server - remove Temp licenses
-
I have a client that has a remote desktop server and has 50 CALs. The server keeps drawing from the temporary license pool that gets created automatically, and throwing event 22 in event viewer. I'm not familiar with the licensing, but shouldn't you be able to remove the temp pool so that clients take licenses from the purchased licenses? I tried following:
http://www.urtech.ca/2014/02/solved-revoke-option-is-greyed-out-in-rd-licensing-manager/
to revoke the licenses, but that just removed the paid licenses and put the temp pool right back. When I reconnected to remote desktop, the client was in the Temp pool again. I'm probably missing something obvious since I haven't worked with this before.
-
All devices/users are allowed a 30-90 grace period. That's what the temp licenses are for. Once that time frame has expired, they should pull from the paid license period.
Really, if a license is available, it's suppose to pull from there first, but that doesn't always happen for some reason.
-
I think something else is going on.
Eventvwr shows the error, but under licensing you can see the licenses. Any ideas? -
show a picture of the licensing console showing you've installed your RDS licenses.
-
@Dashrender Isn't that what the first picture is? Where do I find that?
-
@Mike-Davis said:
@Dashrender Isn't that what the first picture is? Where do I find that?
my bad.. I didn't go back and look.
And your RDS server is 2008? not 2012?
-
It's 2008 R2
-
In the past, XP machines included a RDS license, I wonder if that's still the case for newer Pro OSes.
-
I should also add when I tried to launch Remote Desktop Session Host Configuration to see which licensing mode is configured, it errors with "Unable to complete operation:Not found"
-
Doing:
net stop winmgmt
winmgmt /salvagerepository
net start winmgmtfixed the problem of not being able to open Remote Desktop Session Host Configuration. I can now see the licensing mode is Per Device. I'll see if it's still throwing an error when I log back in.
-
Once I was able to see the configuration, it became clear and I should have noticed it in the first picture. It was pulling from the temp pool in the per device mode, and the paid licenses were in the per user mode.
With that said, if I just flip the mode, I get a different event in event viewer, and it doesn't pull a new temp license. -
you're licenses are specific when you purchase them. I don't think you can switch them.
-
@Dashrender So you have to switch the licensing mode of the server to match your licenses?
-
@Dashrender said:
you're licenses are specific when you purchase them. I don't think you can switch them.
In my other thread about RDS the other day, there is a MS article that said that User mode is on the honor system. Because User mode allows for unlimited devices per user, it's much more difficult to track, so MS doesn't even bother and leaves it us to you.
Are you being denied access?
-
@Mike-Davis said:
@Dashrender So you have to switch the licensing mode of the server to match your licenses?
That is my understanding, yes.
-
A single License server can have both types of licenses, but the RDS servers themselves I think have to be one or the other depending on your needs.
You might have 10 computers that need RDS with 100 users, then you might have 10 users who use 5 different computers each... so this situation is best served with two different RDS servers, Device with 10 licenses limited to those 10 PCs... and a second one with 10 user licenses with unlimited devices for those 10 users.
-
They are not being denied in either case. Just events in event viewer. The error is:
The Remote Desktop license server cannot update the license attributes for user "admin" in the Active Directory Domain "contoso.com". Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain "contoso.com".
If the license server is installed on a domain controller, the Network Service account also needs to be a member of the Terminal Server License Servers group.
If the license server is installed on a domain controller, after you have added the appropriate accounts to the Terminal Server License Servers group, you must restart the Remote Desktop Licensing service to track or report the usage of RDS Per User CALs. -
so all the things mentioned are in the groups mentioned?
-
@Dashrender Yes, the terminal server is in the terminal server license servers group, and it's not a domain controller. In addition I followed these steps: (from https://support.microsoft.com/en-us/kb/2030310)
Use the Delegate Control Wizard to add the permissions to add read\write permissions to the terminalServer attribute or to the Terminal Server License Server attribute of the “user object” by the Terminal Server License Servers group. To do this, follow these steps:
Right-click the domain in Active Directory Users and Computers, and then click Delegate Control.
In the Users and Groups dialog box, click Add. Type Terminal Server License Servers, and then click OK. In the Users and Groups dialog box, click Next.
In the Tasks to Delegate dialog box, click Create a custom task to delegate, and then click Next.
In the Active Directory Object Type dialog box, click Only the following objects in the folder. In the list, click User objects (the last entry that is in the list), and then click Next.
Do one of the following, according to the operating system that the domain controller is running:
For forests that are running Windows Server 2008 or newer Schema:In the Permissions dialog box, make sure that only the General check box is selected. In the Permissions list, click to select the Read and Write Terminal Server license server check box, and then click Next.
In the Completing the Delegation of Control Wizard dialog box, click Finish. -
@Mike-Davis said:
@Dashrender Yes, the terminal server is in the terminal server license servers group, and it's not a domain controller. In addition I followed these steps: (from https://support.microsoft.com/en-us/kb/2030310)
OK so you added the TS itself - how about the License server?
Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain <domain name>.
