Terminal server 2003 refusing more than 23 connections

Thompsonit
Thompsonit used Ask the Experts™
on
Hi all I have a strange problem with my TS 2003 server.

We have an SBS 2003 (Dell Poweredge 2900) sp1 acting as DC AD & TS licensing server, we also have another server running TS on 2003 sp1 (Dell Poweredge 1900).

A week ago the TS began disconnecting clients for no apparent reason,  it also stopped allowing clients to connect unless the total users connected dropped below 23. Thinking it was something wrong with the TS I ran some updates including Server 2003 SP2 - this went drastically wrong so I took the opportunity to fully reinstall TS.

Unfortunately this still didn't solve the problem, I checked the SBS box and discovered that the License Server was only issuing per device Temp licenses even though there were 35 volume licenses avail (TS per user CAL tokens).

I checked the event log and found various ID 38 errors, I started reading up and found:
Event Type:    Error
        Event Source:    TermServLicensing
        Event Category:    None
        Event ID:    38
        Date:        04/05/2010
        Time:        11:21:26
        User:        N/A
        Computer:    ********************
        Description:
        Can't generate a license for client because of error 'Can't add certificate to store, error c0010020.

I followed the instruction:
1. Stop the terminal services licensing service

2. Delete the following registry keys

        HKLM\Software\Microsoft\TermServLicensing\Certificates.

        HKLM\System\CurrentControlSet\services\TermservLicensing\Parameters\Certificates.000

        HKLM\System\CurrentControlSet\services\TermservLicensing\Parameters\Certificates.001

3. Start the terminal services licensing service

This stopped the errors but this morning I'm still having problems with what seems to be a limit of connections. I've checked the TS Config, RDP-Tcp connections, Network adapter and it's set to unlimited connections.

Some times I can get 24 or even 25 users connected but 9/10 I can only get 22 connections, this is causing me to logoff/ disconnect an idle user to allow another user on.

Additional info - The only users effected are external connections (internally I can create countless sessions far in excess of the 22 'limit') The external users receives a timeout error, there is nothing in the event logs on either the TS or the SBS server, if I telnet using port 3389 from the external users machine I  get the equivalent of an CLS command which I read was what I should get - therefore the machine is capable of talking to the TS.

I'm now at my wits end as there seems nothing else wrong in the setup.

Many thanks for any help.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
When you say external, how are they connecting?  Could there be an issue/limit with something VPN related?

Author

Commented:
Hi there Alan, no VPN involved, they're just using RDP from individual machines in different branch offices.
Do the branch offices have thier own DCs / License servers?

Author

Commented:
No, they simply run XP and use RDP into the TS server. This setup has worked flawlessly for 4½ years so I can't see why it's suddenly changed :(
So, on your subnet, you can have more than the 22/23 but anything routed from another subnet cannot?

It does sound like liscensing to me but diagnosing it will be a nightmare.  I would check what TS lisence a client in a branch office has, maybe something on the firewall has changed and is preventing licensing being handed out properly?

Author

Commented:
The branch machines are receiving 'per device' licenses, I can see them & the machine name in the TS Licensing MMC.

As for' diagnosing will be a nightmare' - it has been for the last week lol, I'm away on holiday next week so really don't want to have the 'PFY' deal with this ;)
Sorry, can you recap for me?

What TS CALs have you got? (Paid for and installed)
What do the internal clients get?
What do the external client get?

"really don't want to have the 'PFY' deal with this", maybe you should connect the users mice to 240v, problem solved!

Author

Commented:
Taken directly from the TS Licensing MMC:

Product                                                          Type                       Total                Available                Issued
Temp Lic Win  2003 (TS per Device CAL Token)  TEMP                  -                          -                           38
Win Server 2003 TS per User CAL Token      Volume License       35                      35            Not Applicable

The server is giving out Temp per device licenses (still in the 'grace period') but we own per user licenses....hmmmmmm
In Control Panel, Licensing, what is set?

Author

Commented:
The Terminal Server is currently set to 'Per Server. Number of concurrent connections: 35"

The SBS server (TS licensing server) just displays the Add more licenses pop up.

Author

Commented:
For info we currently have 24 machines connected but time out on any new connections - there seems no rhyme nor reason to it :(
"The Terminal Server is currently set to 'Per Server. Number of concurrent connections: 35""

I think that's your problem.  Surely that should be set to "per device or per user"?!?

Author

Commented:
A quick update, the TS is now using per user although when I now check it via
Admin Tool
licensing
properties
product view
it shows server is using Product: Windows Server, Licensing Mode: Per Device or Per User, Licenses Purchased: N/A

The N/A part is a little worrying as when it was on the on the per server mode I had 35 licenses.

The Terminal Server is still giving out Temp licenses but as of yesterday there were 25 concurrent connections with no apparent problems.

A bit worrying is that there are 2 temp licenses that have been issued to computer names I don't recognise!!!

I will wait until close of play today and then award the points to Alan if all is ok - many thanks Alan :)

Author

Commented:
Apologies for the delay in replying, at the moment no more Temp device licenses are being issued, the TEMP device licenses are still on the system with an expiry date of 31st Oct so I suppose I will have to wait until after that date to see if the licensing mode is truly working on a user rather than device mode (at the moment I still have 35 unused 'User' licenses).

Thanks for your help Alan.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial