How to control which clients are issued TS license?

[n***@easy.com]

I have a single Windows 2003 Server running terminal services in a
Win2k AD Domain. The terminal server is also the licensing server. We
are using per device licenses. How can we control what clients
(computers) are issued a TS license? Is there a group policy for this?

Our TS licenses are being chewed up because someone logs in one time
from a PC and is assigned a license. As I understand it, we cannot
revoke these licenses we simply have to wait for them to expire in
52-89 days so we want to exert some kind of positive control over this.

Thanks for the help!

Jeff

[Patrick Rouse]

You can't, unless you restrict (using a 3rd party app or IPSec) which
computer can logon to the terminal server. If you've allowed too many
computer to logon to the terminal server, then you need more TSCALs.

http://www.workthin.com/tsls2k3.htm

Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com

Post by n***@easy.com
I have a single Windows 2003 Server running terminal services in a
Win2k AD Domain. The terminal server is also the licensing server. We
are using per device licenses. How can we control what clients
(computers) are issued a TS license? Is there a group policy for this?
Our TS licenses are being chewed up because someone logs in one time
from a PC and is assigned a license. As I understand it, we cannot
revoke these licenses we simply have to wait for them to expire in
52-89 days so we want to exert some kind of positive control over this.
Thanks for the help!
Jeff

[Vera Noest [MVP]]

Some extra information:

The *first* time a client connects, it is given a temporary license.
That is done with the purpose to avoid your situation: since the
license is issued before it is known who the user is, a malicious
user could use up all your licenses.
During the *second* logon, the client receives a permanent license.

So it must be one of your authorized users who is running around and
logging in (at least 2 times) on different clients.

User education is the keyword here + limiting the number of
authorized users on the TS, instead of adding all Domain Users.

--
Vera Noest
MCSE,CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
*----------- Please reply in newsgroup -------------*

"=?Utf-8?B?UGF0cmljayBSb3VzZQ==?="

Post by Patrick Rouse
You can't, unless you restrict (using a 3rd party app or IPSec)
which computer can logon to the terminal server. If you've
allowed too many computer to logon to the terminal server, then
you need more TSCALs.
http://www.workthin.com/tsls2k3.htm
Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com

Post by n***@easy.com
I have a single Windows 2003 Server running terminal services
in a Win2k AD Domain. The terminal server is also the
licensing server. We are using per device licenses. How can
we control what clients (computers) are issued a TS license?
Is there a group policy for this?
Our TS licenses are being chewed up because someone logs in one
time from a PC and is assigned a license. As I understand it,
we cannot revoke these licenses we simply have to wait for them
to expire in 52-89 days so we want to exert some kind of
positive control over this.
Thanks for the help!
Jeff

[n***@easy.com]

Great information! I appreciate your help.

Jeff