Re: recommended TS license setup

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

That's what I was afraid of - the corporate people aren't going to allow a
two-way trust, and I see errors which I think are caused by the TS License
trying to write to the corporate AD). (to answer your question the users
are in the corporate AD and the TS boxes are in the ad.nicc domain, but
there is only a one-way trust)

If I fall back to installing the TS license server on a stand-alone system,
will this scenario then work? Can license server installed on a standalone
box issue per user TS CALs to machine in other domains and/or other
standalone systems?

Thanks Vera,
Blake

"Vera Noest [MVP]" <vera.noest@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:Xns9B71A7F62581Fveranoesthemutforsse@xxxxxxxxxxxxxxxx
So the users are in the corporate domain, and the Terminal Server
are in the ad.nicc domain, correct? And ad.nicc trusts the
corporate domain.
I think that you need a two-way trust:

The LS can only issue licenses to Terminal Servers in the same or
trusted domains (which would mean the LS must be in ad.nicc), but
the domain which hosts the user accounts must trust the domain
which the LS is in, otherwise the LS can't write the Per User
license to the user account properties in the corporate domain.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Blake" <blake.duffey@xxxxxxxxx> wrote on 10 dec 2008 in
microsoft.public.windows.terminal_services:

I am not comfortable reducing my security profile as suggested
to make a stand alone license server function.



Let's suppose we ignore any standalone machines.

Most of my machines are members of the ad.nicc domain. There is
a one-way trust between ad.nicc and the corporate domain so
users can use their corporate credentials to log into my
machines..

Users need to be able to log into ad.nicc machines using their
corporate ID. My CALs are Per User.

Where should I install my TS license server? The ad.nicc domain
or the corporate domain?

Blake



"Blake" <blake.duffey@xxxxxxxxx> wrote in message
news:uIlTYYwWJHA.5764@xxxxxxxxxxxxxxxxxxxxxxx
I had already found your great site Vera. :)

I guess my question is - can I issue *Per User CALs* from a
standalone TS License server to machines in other domains?

Blake

"Vera Noest [MVP]" <vera.noest@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
in message
news:Xns9B70D8AA3D5D0veranoesthemutforsse@xxxxxxxxxxxxxxxx
Check this:

Can I use a single TS Licensing Server to issue TS CALs to
Terminal Servers in multiple untrusted domains and workgroups?
http://ts.veranoest.net/ts_faq_licensing.htm#LS_untrusted_domai
ns

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Blake" <blake.duffey@xxxxxxxxx> wrote on 10 dec 2008 in
microsoft.public.windows.terminal_services:

Most of my machines are members of the ad.nicc domain. There
is a one-way trust between ad.nicc and the corporate domain
so users can use their corporate credentials to log into my
machines.

Some of my machines are standalone.

Users need to be able to log into ad.nicc machines using
their corporate ID, and users need to be able to log into the
standalone machines using local credentials. My CALs are Per
User.

Where should I install my TS license server? The ad.nicc
domain? The corporate domain? Stand alone?

Thanks
Blake


.

Relevant Pages

  • Re: recommended TS license setup
    ... I'm going to move my TS CALs to a license server on a standalone machine ... two-way trust, and I see errors which I think are caused by the TS License ... license to the user account properties in the corporate domain. ... Most of my machines are members of the ad.nicc domain. ...
    (microsoft.public.windows.terminal_services)
  • Re: recommended TS license setup
    ... I guess my question is - can I issue *Per User CALs* from a standalone TS ... License server to machines in other domains? ... Where should I install my TS license server? ...
    (microsoft.public.windows.terminal_services)
  • Re: Trust requirements for TS License Server in a different domain
    ... Client is the machine from which user are connecting. ... In that case Domian of that client have to be in trust relationship with License Server Domain ... what is the minimum forest trust required to enable this? ...
    (microsoft.public.windows.terminal_services)
  • Re: Trust requirements for TS License Server in a different domain
    ... User and Per Device TS CALs. ... Device TS CALs *are* issued and demand a proper trust relationship. ... Domain of License Server machine and other domain. ... what is the minimum forest trust required to enable this? ...
    (microsoft.public.windows.terminal_services)
  • Re: The Voting Process in Maryland
    ... I asked the polling "referee" why I should trust these machines to produce an honest count, and she said, "Well, I feel secure about them." ... Perhaps you take the voting process lightly. ... She was laughing at your inability to make speak your displeasure about the voting machines in an effective manner. ... Democrats posing as Republicans to lower Webb's vote. ...
    (rec.boats)