We have a Win 2003 Server, which is our domain controller, our TS server and our TS License server. The name of this server is PHL1, it's IP address is 192.168.100.7. We have 6 CAL's installed (per device) and all worked fine. The client PC are all XP Professional.
Recently to implement stronger security to restrict TS access to certain client computers, we enabled the group policy "License Server Security Group" which makes use of the group called "Terminal Server Computers". We then added the computers that are allowed TS access to this group, inluding the server PHL1.
Now when a clients TS license expires on a client, it cannot get the license renewed. The System Event Viewer on the server shows the following three corresponding messages in this order:
1) Error: TermServLicensing: A license could not be issued to 192.168.100.7 because it is not a member of the Terminal Server Computers group.
2) Warning: TermService: This Terminal Server is not able to communicate with the License Server. Please make sure that this Terminal Server's computer account is a member of the "Terminal Server Computers" group on License Server (PHL1).
**Note here: The PHL1 server is in the group "Terminal Server Computers" and, as previously stated, is both the Terminal Server and the Terminal Services Licensing server.
3) Information: TermService: The terminal server client XP-OFFICE1 has been disconnected because its license could not be renewed.
**Note here: XP-OFFICE1 is the client PC's name which is also in the group "Terminal Server Computers"
If we disable the "License Server Security Group" group policy, the server will grant the license to the client and all works fine again.
What are we doing wrong?
Thanks
Recently to implement stronger security to restrict TS access to certain client computers, we enabled the group policy "License Server Security Group" which makes use of the group called "Terminal Server Computers". We then added the computers that are allowed TS access to this group, inluding the server PHL1.
Now when a clients TS license expires on a client, it cannot get the license renewed. The System Event Viewer on the server shows the following three corresponding messages in this order:
1) Error: TermServLicensing: A license could not be issued to 192.168.100.7 because it is not a member of the Terminal Server Computers group.
2) Warning: TermService: This Terminal Server is not able to communicate with the License Server. Please make sure that this Terminal Server's computer account is a member of the "Terminal Server Computers" group on License Server (PHL1).
**Note here: The PHL1 server is in the group "Terminal Server Computers" and, as previously stated, is both the Terminal Server and the Terminal Services Licensing server.
3) Information: TermService: The terminal server client XP-OFFICE1 has been disconnected because its license could not be renewed.
**Note here: XP-OFFICE1 is the client PC's name which is also in the group "Terminal Server Computers"
If we disable the "License Server Security Group" group policy, the server will grant the license to the client and all works fine again.
What are we doing wrong?
Thanks
