{"id":220,"date":"2005-08-01T07:44:42","date_gmt":"2005-08-01T12:44:42","guid":{"rendered":"http:\/\/192.168.33.66\/wp\/?p=220"},"modified":"2010-10-05T13:34:47","modified_gmt":"2010-10-05T18:34:47","slug":"terminal-server-2003-licensing","status":"publish","type":"post","link":"http:\/\/www.wildow.com\/blog\/?p=220","title":{"rendered":"terminal server 2003 licensing"},"content":{"rendered":"

http:\/\/www.tek-tips.com\/faqs.cfm?fid=4850<\/a><\/p>\n

http:\/\/www.windowsnetworking.com\/articles_tutorials\/Windows_2003_Terminal_Services_Part2.html<\/a><\/p>\n

<\/p>\n\n\n\n\n
How To Set up Per User CALs on a Terminal Server through Windows 2003 Server<\/strong><\/span><\/p>\n
\nWhat you need:<\/p>\n

At least 1 Windows 2003 server<\/a>, though at least 2 is suggested, one being License server, and one being the Terminal Server.<\/p>\n

1. Install License server on a WIndows 2003 Server (This can be the same server you are using for TS).
\n\u00a0\u00a0\u00a0Note: A Windows 2000 Server can be used for the licensing manager only if you have Per Device CALs,
\n\u00a0\u00a0\u00a0INSTEAD of Per User, NOT Mixed.
\n\u00a0\u00a0\u00a0Note: Although you can have a mixture of Device and User CALS, you cannot run both from the same server
\n\u00a0\u00a0\u00a0at the same time.
\n\u00a0\u00a0\u00a0Note: (added by mlichstein) he suggests the following: If you have 2003 Terminal servers<\/a>, you MUST have a
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a02003 licensing server, regardless of the type of licenses.
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0It is my understanding, after conversations with MS that this is not the case, and that if you have
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0ONLY Per Device CALs, then you can use a Windows 2000 Server. It is only if you have User CALs that
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0you MUST use Windows 2003. For this reason, MS suggest you don’t use Windows 2000 if you have
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Windows 2003 Terminal Servers.<\/p>\n

2. Call Microsoft<\/a> to activate your License Server, AND your CALs.
\n\u00a0\u00a0\u00a0Note: Apparently this can be done over the internet, but that’s not how I did it!
\n\u00a0\u00a0\u00a0Also, (added by ChicagoTechNet) you can auto-activate licences.<\/p>\n

3. Change the configuration of the Terminal Server to use Per User, rather than the default Per Device.
\n\u00a0\u00a0\u00a0Note: To do this, click Start -&gt; (All programs -&gt;) Administrative Tools<\/a> -&gt; Terminal Service Configuration.
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Then click on Server Settings and change the Licencing value to &amp;quot;Per User&amp;quot;.
\n\u00a0\u00a0\u00a0Note: IMPORTANT! If you install TS with Per User CALs, because the default is Per Device, you HAVE TO
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0change to Per User, or 120 days later you will have problems. (added by ChicagoTechNet)<\/p>\n

4. If users still can’t get in, and get &amp;quot;You do not have permission to access this session&amp;quot;, or something similar,
\n\u00a0\u00a0\u00a0then you need to do 2 things:
\n\u00a0\u00a0\u00a0a) Make sure the local security<\/a> policy on the Terminal Server reflects that the required users have
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&amp;quot;Allow Log On Locally&amp;quot; rights, and &amp;quot;Allow log on through Terminal Services&amp;quot; rights.
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Note: When you open Local Security Policy under Administrative Tools, these two are found in
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Local Policies -&gt; User Rights Assignment
\n\u00a0\u00a0\u00a0b) If still can’t log in, then likely the server has trouble locating itself as licensing server, or the licensing server
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0is hard to reach.
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0In this case, follow the directions here: http:\/\/support.microsoft.com\/?kbid=279561<\/a>
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Note: The final Key (looks like a folder), which would be your server’s name should contain NO data values,
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0except (Default).<\/p>\n

5. If still no joy… well, youneed to call MS because youmust have done something wrong! \ud83d\ude09<\/p>\n

Some important points:<\/p>\n

1. You only need current Windows Server<\/a> 2003 license for Terminal Server, and not a separate license.
\n\u00a0\u00a0\u00a0You do need CALs for all active connections to the server. These are of two types:
\n\u00a0\u00a0\u00a0a) Per Device: This is the default configuration, and is the type of licnese that is temporary for 120 days
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0when TS is first installed. These licenses allow a machine to connect to the server, and ANYONE using
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0that machine can legally access the TS under its license, but a user using that machine cannot then go
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0to their machine and access the TS under the same license! If they do this a new Per Device license will
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0be issued if one is available.
\n\u00a0\u00a0\u00a0b) Per User: This (as described above) is not default, but means that once a user logs onto the TS, that
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0same user account in AD can access the TS from ANY machine connected to the network, and this
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0includes a terminal session via a link through some hotel on the other side of the world, if need be! \ud83d\ude09<\/p>\n

2. This is diferent than Windows 2000 which only has one type of CAL, which is equivalent to Per Device.<\/p>\n

3. IMPORTANT! Although Windows 2000 Pro and Windows XP Pro are allowed access to Windows 2000
\n\u00a0\u00a0\u00a0Terminal Server WITHOUT buying a new CAL (or at least that was the case for a while), Windows 2003
\n\u00a0\u00a0\u00a0Server – Terminal Services does not allow this. CALs must be purchased for each User, or Device.<\/p>\n

4. If the server is in Per User mode as described above, then any Per Device temporary licences listed as
\n\u00a0\u00a0\u00a0issued in TS Licensing Manager will be ignored. But, even though users will be able to log on using the
\n\u00a0\u00a0\u00a0Per User CALs, these will not show as issued in the Licensing Manager. This is a &amp;quot;bug&amp;quot; of sorts, that will
\n\u00a0\u00a0\u00a0(apparently) be remedied by Microsoft at a later date. Essentially it is because User CALs are not currently
\n\u00a0\u00a0\u00a0supported (managed) by the License Manager software! ALthough Per Device CALs are supported.<\/p>\n

5. For more info, see this site: http:\/\/support.microsoft.com\/?kbid=822134<\/a>
\n\u00a0\u00a0\u00a0(added by mlichstein) useful link if you have time to read it (instead of this quick FAQ):
\n\u00a0\u00a0\u00a0http:\/\/www.microsoft.com\/windowsserver2003\/techinfo\/overview\/termservlic.mspx<\/a><\/p>\n

More info, from the official MS TS site:
\nhttp:\/\/www.microsoft.com\/technet\/treeview\/default.asp?url=\/technet\/prodtechnol\/windowsserver2003\/serverroles\/terminalserver\/default.asp<\/a><\/p>\n

Another good link (12\/11\/04 UK Date): http:\/\/www.wown.com\/articles_tutorials\/Windows_2003_Terminal_Services_Part1.html<\/a><\/p>\n

Hope this all helps,<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"excerpt":{"rendered":"

http:\/\/www.tek-tips.com\/faqs.cfm?fid=4850 http:\/\/www.windowsnetworking.com\/articles_tutorials\/Windows_2003_Terminal_Services_Part2.html<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-220","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/220","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=220"}],"version-history":[{"count":2,"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/220\/revisions"}],"predecessor-version":[{"id":515,"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/220\/revisions\/515"}],"wp:attachment":[{"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=220"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=220"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=220"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}