2008 TS issue Licences/Remote desktop

BMI-IT
BMI-IT used Ask the Experts™
on
I have users  that are unable to connect to our 2008 rdpc server after being able to, checking the event log I see this
-------------------------------
"The Terminal Services license server cannot update the license attributes for user "Username" in the Active Directory Domain "domain.local". Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain "domain.local".
If the license server is installed on a domain controller, the Network Service account also needs to be a member of the Terminal Server License Servers group."
--------------------------------

The License server is running on the RDPC server not the Domain controller. I checked users and computers OU one the DC and under the Terminal server OU I see the TS/License server

The user can make the connection but as soon as the session manager starts it disconnects with the "cannot connect to this server message, this is only happening to Windows 7 users.

I found another resource talking about using adsiedit and adding

Read msTSExpireDate
Write msTSExpireDate
Read msTSLicenseVersion
Write msTSLicenseVersion
Read msTSManagingLS
Write msTSManagingLS

 to the users TS permissions but no joy.

Anyone got any ideas or pointers?

For more info, the domain was updated  from 2000 to a 2003 forest level but both of my DC's are 2008 R2
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Author

Commented:
OK i think i found why...

in my 2008 AD I see only the Terminal servers OU and no terminal server license servers group !!! the old admin I replaced out the TS/License server in the  terminal server group

I have two 2008 DC's how can I add those missing groups? the network was originally 2000 and was updated 7 months ago.

Author

Commented:
Ok guys now I really confused.. I reviewed the configuration for the License server and it says that it is in the CORRECT group (although that group isn't there there in AD) see image.. is this correct?


 LS Config review
Top Expert 2012

Commented:
Are you sure the group is not in AD? Don't check in TS OU check the groups
Acronis in Gartner 2019 MQ for datacenter backup

It is an honor to be featured in Gartner 2019 Magic Quadrant for Datacenter Backup and Recovery Solutions. Gartner’s MQ sets a high standard and earning a place on their grid is a great affirmation that Acronis is delivering on our mission to protect all data, apps, and systems.

Author

Commented:
OK yes.. thank you... I found the terminal server license servers under the "builtin"  and it has the TS -LS server in there under properties-members.

Author

Commented:
thanks, I saw that script while doing research, I'm very hesitant about running scripts like that in case it affects anything else such as exchange permissions in AD. Any other solutions?
Top Expert 2012
Commented:
That is going to be the solution that fixes your problem this will not affect Exchange permissions

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial