Link to home
Create AccountLog in
Avatar of BMI-IT
BMI-IT

asked on

2008 TS issue Licences/Remote desktop

I have users  that are unable to connect to our 2008 rdpc server after being able to, checking the event log I see this
-------------------------------
"The Terminal Services license server cannot update the license attributes for user "Username" in the Active Directory Domain "domain.local". Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain "domain.local".
If the license server is installed on a domain controller, the Network Service account also needs to be a member of the Terminal Server License Servers group."
--------------------------------

The License server is running on the RDPC server not the Domain controller. I checked users and computers OU one the DC and under the Terminal server OU I see the TS/License server

The user can make the connection but as soon as the session manager starts it disconnects with the "cannot connect to this server message, this is only happening to Windows 7 users.

I found another resource talking about using adsiedit and adding

Read msTSExpireDate
Write msTSExpireDate
Read msTSLicenseVersion
Write msTSLicenseVersion
Read msTSManagingLS
Write msTSManagingLS

 to the users TS permissions but no joy.

Anyone got any ideas or pointers?

For more info, the domain was updated  from 2000 to a 2003 forest level but both of my DC's are 2008 R2
Avatar of BMI-IT
BMI-IT

ASKER

OK i think i found why...

in my 2008 AD I see only the Terminal servers OU and no terminal server license servers group !!! the old admin I replaced out the TS/License server in the  terminal server group

I have two 2008 DC's how can I add those missing groups? the network was originally 2000 and was updated 7 months ago.
Avatar of BMI-IT

ASKER

Ok guys now I really confused.. I reviewed the configuration for the License server and it says that it is in the CORRECT group (although that group isn't there there in AD) see image.. is this correct?


 User generated image
Avatar of Darius Ghassem
Are you sure the group is not in AD? Don't check in TS OU check the groups
Avatar of BMI-IT

ASKER

OK yes.. thank you... I found the terminal server license servers under the "builtin"  and it has the TS -LS server in there under properties-members.

Avatar of BMI-IT

ASKER

thanks, I saw that script while doing research, I'm very hesitant about running scripts like that in case it affects anything else such as exchange permissions in AD. Any other solutions?
ASKER CERTIFIED SOLUTION
Avatar of Darius Ghassem
Darius Ghassem
Flag of United States of America image

Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
See answer