Hello,
i've got a problem with Terminalservice-Licensing: We migrated our AD from W2003 to W2008. At the same time, we updated our Terminalservice-Licenseserver to W2008 (Memberserver, no DC). We are using per-user TSCAL licensing. The problem is, that for (nearly) every user that logs on to a W2008 Terminalserver, an event 4105 is generated in the eventlog of the Licenseserver, that means that the licence server cannot update the ad user properties when he delivers the cals.
We have discovered that the terminalserver-licenceserver group is under the security properties of the user listed but has no rights. For new created users the rights "terminalserver-licenceserver read/write" are correctly set and for those users no event 4105 is generated. The problem is, that License-reporting (usage) is only working for those newly created accounts and not for old ones. Why doesn't the terminalserver-licenceserver group have the rights to modify the Terminalserver-AD attributes for older accounts (these accounts were created when the domain-level was W2003)??? Is there a workaround or hotfix from Microsoft to correct the securitysettings ??
Many thanks
Ralf
i've got a problem with Terminalservice-Licensing: We migrated our AD from W2003 to W2008. At the same time, we updated our Terminalservice-Licenseserver to W2008 (Memberserver, no DC). We are using per-user TSCAL licensing. The problem is, that for (nearly) every user that logs on to a W2008 Terminalserver, an event 4105 is generated in the eventlog of the Licenseserver, that means that the licence server cannot update the ad user properties when he delivers the cals.
We have discovered that the terminalserver-licenceserver group is under the security properties of the user listed but has no rights. For new created users the rights "terminalserver-licenceserver read/write" are correctly set and for those users no event 4105 is generated. The problem is, that License-reporting (usage) is only working for those newly created accounts and not for old ones. Why doesn't the terminalserver-licenceserver group have the rights to modify the Terminalserver-AD attributes for older accounts (these accounts were created when the domain-level was W2003)??? Is there a workaround or hotfix from Microsoft to correct the securitysettings ??
Many thanks
Ralf