Hello,
We have a single Windows 2008 Standard Terminal Server with Citrix XenApp. I have purchased and installed 100 Windows 2008 TS Licenses in Per-User mode. We have a windows 2003 Domain, and the schema has been upgraded Windows 2008 (Version 44).
My question:
1) How do we clear out old per-user CALs when someone either leaves the company or no longer needs TS access?
2) It is my understanding that the TS Licenses are stored in the user accounts in A.D. Is this correct?
3) Is it safe or acceptable to modify AD User properties to directly to clear out the licenses (see explanation below)?
I saw on another site that you can use ADSIEDIT (or a script) to modify certain account attributes and "trick" the TS to thinking that account has expired. The attributes are as follows (for Schema version 44):
msTSManagingLS
msTSLicenseVersion
msTSExpireDate
I did play with this a little. The first two values can be deleted, but msTSExpireDate can only be changed. I tried clearing the first two, and moving the ExpireDate to the past, and that seems to have cleared that licens out of the system (When i ran a licensing report on the TS, it dropped by 1). When I logged back in again with this user, I ran a license report from the TS, and the license count increased by 1, as expected.
I also tried simply removing the msTSManagingLS value (clearing it), this had the same affect, dropping the "Used license" count by 1. This acted strangely, though. When I logged in again and ran a report, the license count did not increase.
Kind of a lot of info here, but I'd appreciate any suggestions on how to manage aged licenses that have not yet expired.
Thanks,
Andrew
![[medal]](/data/assets/smilies/medal.gif "[medal] [medal]")
Hard work often pays off over time, but procrastination pays off right now!
We have a single Windows 2008 Standard Terminal Server with Citrix XenApp. I have purchased and installed 100 Windows 2008 TS Licenses in Per-User mode. We have a windows 2003 Domain, and the schema has been upgraded Windows 2008 (Version 44).
My question:
1) How do we clear out old per-user CALs when someone either leaves the company or no longer needs TS access?
2) It is my understanding that the TS Licenses are stored in the user accounts in A.D. Is this correct?
3) Is it safe or acceptable to modify AD User properties to directly to clear out the licenses (see explanation below)?
I saw on another site that you can use ADSIEDIT (or a script) to modify certain account attributes and "trick" the TS to thinking that account has expired. The attributes are as follows (for Schema version 44):
msTSManagingLS
msTSLicenseVersion
msTSExpireDate
I did play with this a little. The first two values can be deleted, but msTSExpireDate can only be changed. I tried clearing the first two, and moving the ExpireDate to the past, and that seems to have cleared that licens out of the system (When i ran a licensing report on the TS, it dropped by 1). When I logged back in again with this user, I ran a license report from the TS, and the license count increased by 1, as expected.
I also tried simply removing the msTSManagingLS value (clearing it), this had the same affect, dropping the "Used license" count by 1. This acted strangely, though. When I logged in again and ran a report, the license count did not increase.
Kind of a lot of info here, but I'd appreciate any suggestions on how to manage aged licenses that have not yet expired.
Thanks,
Andrew
Hard work often pays off over time, but procrastination pays off right now!