Event 4105 on licence server

[Sven Vollmann]

hello,

we use a windows 2008 licence server that is not installed on a dc and
use "per user" cals for our 2008 ts farm.
on our licence server we see in the eventlog the warning 4105 that means
that the licence server cannot update the ad user properties when he
delivers the cals.
we have discovered that the terminalserver-licenceserver group is under
the security properties of the user listed but has no rights.
by new created users the rights "terminalserver-licenceserver read" and
"terminalserver-licenceserver write" are automatically set for this group.
if we set this rights manual the warning disappears in the eventlog.
my question now is:
how can we set this rights for all users at one time. with admodify it
won't work.

best regards

sven

 

[Ratnesh Yadav [MSFT]]

Re: Event 4105 on licence server

Your License server machine should be member of TSLS (Terminal Server
License Server) group on Domain Controller.

Ratnesh

"Sven Vollmann" <Sven.Vollmann@FernUni-Hagen.de> wrote in message
news:e3lephtIJHA.1308@TK2MSFTNGP02.phx.gbl...
> hello,
>
> we use a windows 2008 licence server that is not installed on a dc and use
> "per user" cals for our 2008 ts farm.
> on our licence server we see in the eventlog the warning 4105 that means
> that the licence server cannot update the ad user properties when he
> delivers the cals.
> we have discovered that the terminalserver-licenceserver group is under
> the security properties of the user listed but has no rights.
> by new created users the rights "terminalserver-licenceserver read" and
> "terminalserver-licenceserver write" are automatically set for this group.
> if we set this rights manual the warning disappears in the eventlog.
> my question now is:
> how can we set this rights for all users at one time. with admodify it
> won't work.
>
> best regards
>
> sven

 

[Ramasamy Pullappan [MSFT]]

Re: Event 4105 on licence server

a. Per-user licensing is not supported with LS in workgroup

b. Bulk Editing the user object using DSACLS.EXE is an easy way:
Dsacls.exe "CN=<MyAdminName>,OU=Service
Accounts,OU=Resources,OU=SBI,DC=mytestDom,DC=com," /G "BUILTIN\Terminal
Server License Servers:WPRP;Terminal Server License Server"
Dsacls.exe "CN=<MyAdminName>,OU=Service Accounts,OU=Resources,OU=SBI,
DC=mytestDom,DC=com," /G "BUILTIN\Terminal Server License
Servers:WPRP;terminalServer"

c. Bulk Editing the user object properties can be also possible with
ADSIEdit by editing the ADSchema directly

HTH,
Ram.
--
This posting is provided "AS IS" with no warranties, and confers no rights.

"Sven Vollmann" <Sven.Vollmann@FernUni-Hagen.de> wrote in message
news:e3lephtIJHA.1308@TK2MSFTNGP02.phx.gbl...
> hello,
>
> we use a windows 2008 licence server that is not installed on a dc and use
> "per user" cals for our 2008 ts farm.
> on our licence server we see in the eventlog the warning 4105 that means
> that the licence server cannot update the ad user properties when he
> delivers the cals.
> we have discovered that the terminalserver-licenceserver group is under
> the security properties of the user listed but has no rights.
> by new created users the rights "terminalserver-licenceserver read" and
> "terminalserver-licenceserver write" are automatically set for this group.
> if we set this rights manual the warning disappears in the eventlog.
> my question now is:
> how can we set this rights for all users at one time. with admodify it
> won't work.
>
> best regards
>
> sven