Server 2008 R2 in non-domain mode that allows for more than 2 RDP Users. Is it hacked?

I've been asked to look at a server that is configured as a standalone machine.

It is part of a workgroup.

Active Directory is not installed.

Terminal Services does not appear to be installed

It allows more than 2 RDP users

I thought that Server forced you to run as a domain controller or part of a domain or was that just 2003?

I thought that Terminal Services was required to allow more than 2 RDP Users.

Is this Server licensed properly? Is it hacked somehow to allow more RDP Users?

List of installed Features

It allows for more than 2
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

You can have more than 2 RDP users but only two can access the server at the same time.
MJCSAuthor Commented:
It appears that 3 can be logged in simultaneously on this one. One was disconnected but 2 were logged in.
Can you have three active sessions at the same time?
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

MJCSAuthor Commented:
I think so. Usually when there is a 2 person restriction, the 3rd can't login until one of the others logs out. Even if they are disconnected.
Lee W, MVPTechnology and Business Process AdvisorCommented:
You can have 3 active sessions if the third uses the /admin switch.

Two can be sessions and the third is a console session - the /admin connects to the console leaving the other two sessions connected on non-console.
MJCSAuthor Commented:
I don't think that's happening.

I guess 2008 behaves differently than 2003.

I was sure that 2003 would fail to login if 2 were already in whether they were disconnected or not.

2008 seems to not count disconnected sessions. I actually tried to login to 3 but got prompted to log out one of the 2 active sessions.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
MJCSAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for MJCS's comment #a40833834
Assisted answer: 250 points for akb's comment #a40833612
Assisted answer: 250 points for Lee W, MVP's comment #a40833819

for the following reason:

Figured out answer through trial
I object to this question being closed without allocating points.
My initial comment was correct.
MJCSAuthor Commented:
I split points between you and Lee. Did you think I should have given all of them to you?
Not at all. Thanks for the points. I was sent an email saying you wanted to close the question without allocating points.
MJCSAuthor Commented:
oh ok.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.