Terminal Server Licensing Problems with GPO Security Group License Server

Hello,
I have two fresh installs of W2K12R2.
One is RD Session Host and the other one is the License Server. Everything is fine until I active the GPO Security Group License Server. After that the License Server gives no licenses
to die clients (we have User und Device CALs). TS Licensing Diagnostic’s shows no errors, the number of available licenses is displayed correctly, even the state of GPO Security Group License Server is correctly shown as "active" and die
Membership in the Group "RDS-Endpointserver" is "Yes". Eventlog shows no Errors. Log in on the session host is even possible, maybe because the RDS-Service is in evaluation time.
If the GPO Security Group License Server is disabled again, the server starts to serve licenses as expected.
I don’t know what I can do anymore, never had problems with exact the same setup under W2K8, but with W2K12 is the second time I notice this issue.
Thanks for your ideas,
Andreas

Hi Andreas,
Thank you for posting in Windows Server Forum.
Sorry to inform but there is no official document for server 2012 related to this event, you can go through below article for reference.
You cannot use a security group to add computer accounts to the Terminal Server Computers group. You must add each computer account explicitly. To verify whether an RD Session Host server is allowed to request RDS CALs from the Remote Desktop license server,
you can use the IsSecureAccessAllowed method of Win32_TSLicenseServer class. For more details about this method, click here.
1. License Diagnosis tool returns error "License server <computer name> cannot issue RDS CALs to the Remote Desktop Session Host Server because the 'License server security group' Group
Policy setting is enabled."
2.Control the Issuance of RDS CALs
Note: You should only enable this policy setting when the license server is a member of a domain. You can only add computer accounts for RD Session Host servers to the RDS Endpoint Servers group when the license server is a member of a domain.
Hope it helps!
Thanks,
Dharmesh

Similar Messages

There is a problem with the security certificate of the proxy server. Error code 18 and 38.

Hi All,
After several hours and a short night of sleep I'm out of ideas and hopefully someone here can help me trying to solve this one. First of all the situation:
Exchange 2013 on a remote location with a CA-certificate.
Outlook 2010 and 2013 on different locations, locally installed and on RDS.
When I open Outlook on my laptop all is fine, no errors, good sync, no problem. But when I open Outlook on our Remote Desktop Servers with Outlook 2013 I'm getting errors like "There is a problem with the security certificate of the proxy server. The
name on the security certificate is invalid or does not match the name of the site. Outlook is unable to connect to this server. (Error code 18)". Opening Outlook 2010 the message is the same, but the error code now is 38.
After this Outlook opens and is working, there's one more error though. After a while an security warning pops up with the message: "Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the
site's security certificate. * The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority. * The security certificate is valid. * The name on the security
certificate is invalid or does not match the name of the site."
Strangest thing is, it is the certificate of my RDS! It isn't my valid en officially bought certificate from my mailserver. What's going on? I'm out of options, what I've tried so far (in random order):
- restarting mailserver and AD;
- restarting switches;
- restarting routers;
- restarting RDS, AD and all other servers;
- bypassed proxyserver for RDS;
- created a new profile;
- checked recently installed updates;
- checked certificate on mailserver;
- checked RDS on a different location, working fine.
Nothing helped, what can I do next? Please advice.
Regards.

Found a thread that solves half my problem (https://social.technet.microsoft.com/Forums/office/en-US/70d18244-889a-4d95-ac3f-e234672a82b2/there-is-a-problem-with-the-proxy-servers-security-certificate-error-when-starting-outlook?forum=exchangesvrclients).
The first message can be suppressed by adding this to the Exchange config:
set-outlookprovider -Identity EXCH -CertprincipalName msstd:webmail.domain.tld
set-outlookprovider -Identity EXPR -CertprincipalName msstd:webmail.domain.tld
Giving the command get-outlookprovider, gives me empty information regarding the certprinipalname. Filled
this and after recreating the profile or deleting the ost-file I still have the second alert with the local certificate of my RDS.
Not completely where I want to be, any help regarding the second alert is greatly appreciated!

There is a problem with this connection's security certificate The remote computer cannot be authenticated due to problems with its security certificate. Security certificate problems might indicate an attempt to fool you or intercept any data you send

Hi,
I have this Windows 2008 R2 on which I installed remoteapp some years ago.
Now the certificate expired and I get the message
"There is a problem with this connection's security certificate
The remote computer cannot be authenticated due to problems with its security certificate.
Security certificate problems might indicate an attempt to fool you or intercept any data you send to the remote computer."
How should I renew the certificate? I already went to certification store and tried to renew certificate with same key but then it says "the request contains nor certificate template information".
Please advise.
J.
J.
Jan Hoedt

Does the computer account have Enroll permission to the certificate template?
From the Server running your CA, run mmc, click File then Add/Remove Snap-in...
Add Certificate Templates and click OK.
Find the certificate template, then right click and select properties. On my CA its call ed RemoteDesktopComputers but might be called something different depending on what what template your certificate is based on.
On the security tab, click Oblect types, check Computers then OK. Enter the Computername and click OK. Then give your computer account Enroll permisssion.
HTH,
JB

Lync 2013 I have a strange problem concerning group call pickup in lync 2013.the pickup calls on snom 710 having only a second delay, but in lync client it having about 5-7 second Anybody out there having similar problems with call pickup Groups?

HI
I have a strange problem concerning group call pickup in lync 2013.the pickup calls on snom 710 having only a second delay, but in lync client it having about 5-7 second
Anybody out there having similar problems with call pickup Groups?

Hi,
Did you meet any other call delay when you using Lync?
As the issue happen for Lync desktop client, it can be performance issue. Please check if there is any error message from FE Server when the issue happen.
Also please check if you have updated Lync Server to the latest version, if not, update it and then test again.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Problem with shares on Windows 2003R2 server from a Windows 8.1 PC

I'm having problem with shares on Windows 2003R2 server from a Windows 8.1 PC. It times out when I try to copy a file from my PC to the server and I get an error message saying "There is a problem accessing network drive W:\. Make sure you are
connected to the network and try again."
I have no problem copying files from the server to the PC.
Any ideas?

Hi,
How about your problem now? Have you test other machine also installed Windows 8.1? Did they have this problem?
To diagnose this problem, firstly, please check Windows 2003R2 firewall settings, also can disable firewall temporarilly for test.
Secondly, try to use Network Monitor to capture network communication package for test.
Network Monitor:
http://www.microsoft.com/en-us/download/details.aspx?id=4865
Roger Lu
TechNet Community Support

Problems with I/O on Unix Server

HAllo
I have a Problem with reading/writing on the Server my Tomcat is running.
My Application does not find the properties file allthough i tried to get my path with System.getProperty("user.dir"), and also tried to set an absolute path too.
It is also not able to create a new file.
My Question: What rights do applications running in tomcat have by dafault?
How cat i change this rights?
And how do the path have to look in my code if i want to set it fix?
I tried thid ones:
"/mydir/myfile.txt"
"\\mydir\\myfile.txt"

Tomcat is a regular application that has the same rights as the user executing it. Does Tomcat run as a user who has access to the directory you are trying to read/write from?

Problem with cheque printing in production Server Tcode - FBZ5

Hi
Cheque Printing using SAPScript with TCODE FBZ5.
I had a problem with cheque printing in production Server. TCODE - FBZ5
It is working fine in Development Server with proper alligned data but not coming alligned data in production server. I compared, dubugged and checked the allignment...there is no difference I found.
Could you please let me know, where the problem is occuring.
The amount is not coming properly and coming out of the box.....but it is coming properly in development server.
Sekhar

Hi,
For Amount field you must print like &amount(C)&. And it must be printer settings only. Because i gor same like this error while printing cheque. at that time Basis team had made the changes in printer settings.

Problem with showing a group of records in dynamic page (PLS-00428 error)

Hi
I have problems with viewing a group of records from db. I've created Page, which "Page Type" attribute is "PL/SQL". In "PL/SQL Code" field, I've written very simple SQL query: "SELECT * FROM PORTAL_DEMO.EMP ;"
I'd like to generate HTML table with it's result. Unfortunately, every time I get the same Exception:
Error 30584: DBMS_SQL has raised an unhandled exception. ORA-06550: line 1, column 7: PLS-00428: an INTO clause is expected in this SELECT statement
Is it necessary to write a COURSOR (and use HTP function) to realize this functionality? I succeed, trying this way - but it is very uncomfortable ( a lot of code ).
What I have done in wrong way?
Please help me.
Best regards
Mario

How do I handle this?

OS 10.7, SMB Connection, Change to Unicode with Extended Security on Windows Server 2008 Standard

Hi All, I've searched Google, and I've also contacted Apple Support with no luck: I want to implement unicode with extended security on Windows Server 2008 Standard server shared folders so that Lion can connect normally (i.e. Finder->Go->Connect to Server->IP Address or server name) to SMB shares and access files. I'm lacking information; has anyone actually implemented unicode with extended security? If so, how?
Thanks in advance.
Tom

Thanks for the reply aorlich. Do you mean enable file sharing on my Mac? With file sharing enabled, I still cannot get to my Windows 7 shares, although the files on my Mac do become available to Windows. Thanks again.

Hi all, I'm still having problems with my security questions as they were not the ones I answered. Now I'm confused

Still having problems with my security questions as they were not the ones I answered and now I'm confused.

Howdy Paul,
If you are having an issue with your Apple ID security questions, you can reset them using the steps in this article -
If you forgot the answers to your Apple ID security questions - Apple Support
Thanks for using Apple Support Communities.
Best,
Brett L

I have problem with data transfer between Windows Server 2012RT and Windows7 (no more than 14kbps) while between Windows Sever 2012RT and Windows8.1 speed is ok.

I have problem with data transfer between Windows Server 2012RT and Windows7 (no more than 14kbps) while between Windows Sever 2012RT and Windows8.1 speed is ok.

Hi,
Regarding the issue here, please take a look at the below links to see if they could help:
Slow data transfer speed in Windows 7 or in Windows Server 2008 R2
And a blog here:
Windows Server 2012 slow network/SMB/CIFS problem
Hope this may help
Best regards
Michael
If you have any feedback on our support, please click
here.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Strange problem with SQLPLUS when client and server on the same box

Hi,
I have the problem with SQLPLUS when clinet and server on the same machine.
With client and server on the same machine i am running the command
sqlplus -l username/password@connect_identifier as SYSDBA.
With this command, even if you pass in wrong username or wrong password or both as wrong you can able to connect to database and execute queries.
Once Connect_identifier is correct and trying to log in as SYSDBA ,sqlplus will log in to DB with any username and password.
How to get rid of this behaviour. Is there any way to do this.
I am running this command by creating a process in C#
Edited by: user11000236 on Jun 16, 2009 10:31 AM

user11000236 wrote:
Thanks for the info.
How does Oracle/SQLPLUS allows any username or password to log in to DB with SYSDBA Privillages? What is the concept behind this.?
This is explainted in the above mentioned link:
Operating system authentication takes precedence over password file authentication. If you meet the requirements for operating system authentication, then even if you use a password file, you will be authenticated by operating system authentication.

Problem with the% deviation from Project Server 2010 field

hello
I have a problem with the% deviation from Project Server 2010 field.
Within a file or project, this project contains tasks.
Each task has completed the field% deviation.
Within the row "Summary" in the field of% deviation does not perform the sum of all fields of tasks.
Only occurs on certain projects, these projects have the view of PR Progress Report
Anyone know happens?
thank you very much

Hi
Sorry, I'll be more specific now.
Within the field% deviation. Your settings in PWA is:
The formula for field% Deviation:
Str (IIf ([Job baseline] = 0; IIf ([Working] = 0, 0, 100); IIf ([Working] = 0; -100; Int (100 * ([Job] - [Work Online base]) / [Working baseline])))) + "%"
Under the heading rows Calculation Summary:
> Use formula.
Within the field Allocation Calculation of rows:
> It is labeled the "Apply unless you manually specify".
The field [Job] and field [Job baseline] are fields Pack project server.
The error is in project, in the list of tasks.
In the top row, this row summary makes the sum of the ranks of the tasks of the file.
But in my case only in the summary field the same value appears in the tasks.
In all the cells in column% deviation appears the same value.
I hope it helps.
thank you very much

Hi i have a problem with my security question verify email address

hi,
i have a problem with my security question verify email address

If Manage your Apple ID primary, rescue, alternate, and notification email addresses does not help, you can contact the Apple ID Security site from http://support.apple.com/kb/HT5699 or call the AppleCare support number from http://support.apple.com/kb/HE57 and ask to speak with the Account Security Team.

I have problem with the security question i forgot it some body tell me they will show down of the question forgot the answering but nothing show help me plz thanks

I have problem with the security question i forgot it some body tell me they will show down of the question forgot the answering but nothing show help me plz thanks

The reset link will only show if you have a rescue email address (which is not the same thing as an alternate email address) set up on your account : http://support.apple.com/kb/HT5312
If you don't have a rescue email address (you won't be able to add one until you can answer 2 of your questions) then you will need to contact iTunes Support / Apple to get the questions reset.
Contacting Apple about account security : http://support.apple.com/kb/HT5699
When they've been reset (and if you don't already have a rescue email address) you can then use the steps half-way down this page to add a rescue email address for potential future use : http://support.apple.com/kb/HT5312

Terminal Server Licensing Problems with GPO Security Group License Server

Similar Messages

Maybe you are looking for