1

I'm about to purchase RDS CALs for a new RDS 2019 server currently in it's grace period. On checking the license console, we've got duplicate users in there. Is the username case-sensitive? Seems a bit unusual? I don't seem to be able to revoke licenses. Just concerned that we won't have enough licenses if we buy the exact number of licenses we actually have.

Or put it another way, why are there two entries for a single account when Active Directory usernames are case-insensitive. You can logon as TEST.USER or test.user - same account.

enter image description here

Rob Nicholson
  • 1,747

1 Answers1

0

Hi this is a known issue if the license-server does not have the proper permission to update the AD-Attributes

https://social.technet.microsoft.com/Forums/windows/en-US/bb5d15b8-11f8-4ffc-99c8-afe491ce504a/2019-cal-user-license-duplicates-based-upon-case-sensitivity?forum=winserverTS

Windows RD Licensing: Double license from uppercase and lowercase user name

This can be happen if the license attributes are not able to be updated on the user >account object due to lack of permission. What I would recommend is to first grant the >necessary permissions in AD, and then you can rebuild the database to clean things up.

When things are working properly, if a user logs on you should see their license issued >as you do now in RD Licensing Manager, and you should see the RD licensing attributes on >their user account object. You may use AD Users & Computers -- View Advanced Features ->- right-click on the user -- Attributes tab -- look for several msTS* attributes such as >msTSExpireDate, msTSManagingLS, etc. If these are blank and the user shows up in RD >Licensing Manager it is likely the permissions issue.

You can grant the permissions using Active Directory Users and Computers using below >basic steps:

On the OU that contains your users, right-click and choose Delegate Control... , follow >wizard On Users and Groups page, click Add and then enter SELF On Tasks to Delegate page, select Create a custom task to delegate On Active Directory Object Type page select Only the following objects in the folder, >then scroll down and select User objects On Permissions page, select General, then scroll down and select Read and write Terminal >Server license server Once you have updated the permissions, please log on with a user account that doesn't >have their licensing attributes populated and then check after successfully logged on >that the attributes now have values.

Community
  • 1
benniz
  • 46