RE: How to control which clients are issued TS license?
From: Vera Noest [MVP] (Vera.Noest_at_remove-this.hem.utfors.se)
Date: Fri, 04 Feb 2005 07:06:41 -0800
Some extra information:
The *first* time a client connects, it is given a temporary license.
That is done with the purpose to avoid your situation: since the
license is issued before it is known who the user is, a malicious
user could use up all your licenses.
During the *second* logon, the client receives a permanent license.
So it must be one of your authorized users who is running around and
logging in (at least 2 times) on different clients.
User education is the keyword here + limiting the number of
authorized users on the TS, instead of adding all Domain Users.
MCSE,CCEA, Microsoft MVP - Terminal Server
*----------- Please reply in newsgroup -------------*
<PatrickRouse@discussions.microsoft.com> wrote on 04 feb 2005:
> You can't, unless you restrict (using a 3rd party app or IPSec)
> which computer can logon to the terminal server. If you've
> allowed too many computer to logon to the terminal server, then
> you need more TSCALs.
> Patrick Rouse
> Microsoft MVP - Terminal Server
> "firstname.lastname@example.org" wrote:
>> I have a single Windows 2003 Server running terminal services
>> in a Win2k AD Domain. The terminal server is also the
>> licensing server. We are using per device licenses. How can
>> we control what clients (computers) are issued a TS license?
>> Is there a group policy for this?
>> Our TS licenses are being chewed up because someone logs in one
>> time from a PC and is assigned a license. As I understand it,
>> we cannot revoke these licenses we simply have to wait for them
>> to expire in 52-89 days so we want to exert some kind of
>> positive control over this.
>> Thanks for the help!