If the license server is installed on a domain controller, the Network Service account also needs to be a member of the Terminal Server License Servers group. Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain. The Terminal Services license server cannot update the license attributes for user in the Active Directory Domain. Source: Microsoft-Windows-TerminalServices-Licensing If the Remote Desktop Licensing Server computer object is not a member of the “Terminal Server License Server” group then you may find the following error in your Event Logs: Log Name: System If you do not see this ACL entry for Terminal Server License servers, you should open a support case as this would be unexpected behavior. If this is not the case, verify that the security permissions on the “Terminal server License Servers” group show that the “AAD DC Administrators” group has the effective permission “Write Members” as shown below:Īnd on a user within AADDC Users OU, view security effective permissions for the Terminal Service License Servers group and verify it has read\write permissions on the following msTS user attributes shown below: Once you have verified membership in “AAD DC Administrators”, after installation of the Remote Desktop Licensing role, you should find that the server’s Windows AD computer object has been added to the “Terminal Server License Servers” security group as shown below: You can verify membership from within your AAD DS joined workstation with cmd: This process IS supported as long as the administrator installing the Remote Desktop Licensing server role on the Windows Server host is a member of the Azure AD group “AAD DC Administrators” when they are installing the Remote Desktop Licensing server role. In Azure AD Domain Services user writes are only allowed from Azure AD itself, not within Azure AD Domain Services (where the user objects are read only). These questions mostly are around whether or not Per User license auditing reports are supported as this requires AD user attribute updates when the RD Licensing Server issues a per user CAL to the user. I have seen a few questions regarding if Azure AD Domain Services supports Remote Desktop Services (RDS) licensing services.
0 kommentar(er)
