Link to home
Start Free TrialLog in
Avatar of Cozumel
Cozumel

asked on

Where to find CALs in use

Guys, I could use some help here. I am been audited by Microsoft and am not sure what to respond to the question:

4.5 Server Application Installed / In Use:

1) Core/Enterprise
   1.1.) Enterprise Device CAL
   1.2.) Enterprise User CAL
   1.3.) Core Device CAL
    1.2.) Core User CAL


My questions:

1) What is Enterprise Vs Core?
I have "Windows Server - User CAL" (and am running WIn 2008 Enterprise) - in this case should I put Standard User CAL or Enterprise User CAL?
2) It says Server Applications Installed - if i currently have 30 CALs in use but have paid for 100 CALs - should I put here 30 or 100. It says installed so I assume they are interested in what's in use? Otherwise they have the total number on the Volume Center' site so makes no sense to ask me about this.
3) Is there anyway to find out how many CALs are in use on Exchange Server 2007, WIndows Server 2008 R2 and Windows Server 2003? I think I have seen this in earlier server versions but could not find it anywhere now.

Thank you in advance!!!!
ASKER CERTIFIED SOLUTION
Avatar of Cliff Galiher
Cliff Galiher
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Been there, done that.  What you should do is install MS MAP.  What you need to do is do an audit with MAP and it will giver version and edition of servers as well as client PCs, active mailboxes, etc.  just a word of caution, they will try to nail you on SQL licenses and virtualization.  It might be a good idea to negotiate for Enterprise Agreement (EA).  Here is a scenario for you:

You have 300 clients where they connect to 5 different SQL servers ranging from version 7 to 2012.  Regardless of how many CALs you have, you need SQL server 2012 CALs (highest version of Server is what you need CALs for and same for Windows server).  If your SQL server 2008 or higher is installed in a virtualized environment then you better have Software Assurance in order to move VM from one host to another. MAP could greatly help you but try not to share the results with MS or else you will be opening a can of worms.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Cozumel
Cozumel

ASKER

Well I don;t mind counting CALs but the thing is I am not sure what else to count besides the users, do I count MFP and other devices, system accounts for backup and other jobs? Or these are strictly end (human) user CALs they ask for?
Also if I have a file server - do I need separate CALs for that server as well?
Cliff - I think I need to report users CALs - I was asked to purchase those when I got the server software, so I assume I'll just count the active users in AD?

Mohammed: We don't have SQL so that's good.
I noticed the option to install their agent but am afraid it might report something to them directly so not a big fan of it before I get an idea of the situation.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
A user is any physical human that uses a resource on a server. One human *may* have more than one AD account, but they would only require one user CAL in such an instance.

A device is the same way. One device is one physical "thing" on the network that accesses the server. A business can choose to license itself using user CALs only, device CALs only, or a mix of both to best fit their needs.

Take a library. A library may buy user CALs for their staff, so their staff can use multiple devices. User CALs make more economical sense. But they may have a few machines that anyone from the public can come in to use to browse the internet and do research. And those machines may still have access to "stuff" on the library servers, like an intranet card catalog. You can't realistically buy user CALs for every member of the public that might come in off the street, so you'd probably buy a device CAL for those machines.

MFPs fall in that category. If an MFP is *only* used by staff that already has user CALs, their user CAL already covers the windows access they might be using from the MFP. But if the MFP might be used by a guest then user CALs don't make sense and you might want to have a device CAL "assigned" (on paper) to that device.

These types of scenarios are particularly pertinent when businesses set up guest wifi networks. If the guest wifi device can reach the server, even for simple things like DHCP, it would need to be covered by some sort of CAL. I've seen businesses get heavily dinged just because they weren't paying attention to licensing.

So no, you usually don't need to count system accounts (I say usually because, there is always that case where a system account facilitates another device, like a security camera...and the camera still needs a CAL), but other devices may or may not need a CAL depending on how they are used. Licensing is not overly difficult, but it *does* require active planning and can't be done ad-hoc. Which is why accurate documentation is important.
Avatar of Cozumel

ASKER

Thank you both for your input, so just one last clarification:

For the question below, if I have let's say 30 active Users CALs who access AD on my 2008 server, should I put those under Enterprise User or Core User? this is the exact name of the license from the Volume Center: "Windows Server - User CAL"


4.5 Server Application Installed / In Use:

1) Core/Enterprise
   1.1.) Enterprise Device CAL
   1.2.) Enterprise User CAL
   1.3.) Core Device CAL
    1.2.) Core User CAL
Avatar of Cozumel

ASKER

Lee, the reason I asked for MFP is that they have mailboxes on my exchange server, so I am not sure if those count against my Exchange CALs.

Do you guys know if Microsoft MAP Toolkit reports directly to Microsoft? I'd like to give a shot but am a bit concern for sending data to them without my knowledge.
MAP tool DOES NOT report directly to Microsoft.  Shared mailboxes, service accounts, auto-generated emails/batch mailboxes are not considered to have a CAL.  Only 1 CAL is required for a physical human/computer (based if you have user/device CALs) regardless of mailboxes they connect to, SQL servers they connect to or file & print servers they connect to.  There is no such thing as Enterprise Windows CALS, Windows CAL is Windows CAL.  You pay more for the different edition for different features.  With SQL and Exchange it is different.
Avatar of Cozumel

ASKER

Mohammed, you say "there's no such thing as Enterprise Windows CALS" - but this is from Microsoft's form I am filling in right now - it's either Enterprise or Core User CAL so I am baffled.

  1.1.) Enterprise Device CAL
   1.2.) Enterprise User CAL
   1.3.) Core Device CAL
    1.2.) Core User CAL
As I said be for, a windows CAL is neither of those. There is such a thing as a core CAL suite and also an important enterprise CAL suite, but that isn't what you have. So your count for those is zero.
As he mentioned he has access to MVLS and does not have EA, therefore he doesn't own any Enterprise CAL.  Below is a clear description of the two:

CORE CAL SUITE
- Windows Server CAL
- SharePoint Server Standard CAL
- Exchange Server Standard CAL
- System Center Configuration Manager Client Management License
- System Center Endpoint Protection (Anti-virus and subscription service)
- Lync Server Standard CAL

ENTERPRISE CAL SUITE
- All of the components of the Core CAL Suite
- Exchange Server Enterprise CAL with Services
- Exchange Online with archiving
- SharePoint Server Enterprise CAL
- Lync Server Enterprise CAL
- Windows Server Active Directory Rights Management Services CAL
- System Center Client Management Suite consisting of Operations Manager, Service Manager, Data Protection Manager and Orchestractor