Terminal Services 2008 — Error 4105 (Licensing Server Problem)

licensingterminal-serverwindows-server-2008

Here's the rundown on the server:

  • Server 2008 Standard running as a member server in a Server 2003 domain
  • Running Terminal Services for 5 users that need to access a POS application using RemoteApp
  • Running it's own licensing server:
    • 5 TS Per User CALs are installed
    • The "Configuration Review" gives me a splat complaining that the licensing server is not installed on a DC.
    • The server is a member for the "Terminal Server License Servers" group in AD
    • It does not seem to be handing out licenses, although users can log in fine.

I receive the following error when users login:

The Terminal Services license server cannot update the license attributes for user "[username]" in the Active Directory Domain "[domainname]". Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain "[domainname]".
If the license server is installed on a domain controller, the Network Service account also needs to be a member of the Terminal Server License Servers group.
If the license server is installed on a domain controller, after you have added the appropriate accounts to the Terminal Server License Servers group, you must restart the Terminal Services Licensing service to track or report the usage of TS Per User CALs.
Win32 error code: 0x80070005

This appears to be causing some issues with the RemoteApp users. The session seems to disconnect then leave a completely black screen on their system. They can't close the black screen — I have to log them off remotely using Terminal Services Manager. It also forces them to load the RemoteApp in the "Show Details" window that shows when the user is logging into the Terminal Server (that's hard to describe — I'll grab a screenshot if anyone needs one).

I've read this thread and this one on technet, and both point to the following security keys:

  • msTSExpireDate
  • msTSLicenseVersion
  • msTSManagingLS

I've searched high and low to find these keys so that the licensing server can adequately license the users, but I can't find them anywhere. I'm selecting my OU for my user accounts and attempting to change the security there, but I can't find the keys to change.

This domain was upgraded to Server 2003 from Server 2000, so that might be why the keys aren't there. A few people have mentioned doing adprep from the Server 2008 machine to write the correct security keys to the users, but would that cause problems with my existing Server 2003 domain controllers? I don't plan to upgrade my domain controllers to Server 2008 until later in the year.

Does anyone know how I can add the security keys manually to the 5 users that are using this terminal server? Is there anything else I can do to fix this?

Thanks!

EDIT: I'd specifically like to know if running adprep from a Server 2008 MEMBER SERVER in a Server 2003 domain will fix this or cause other problems. Does anyone have any insight?

Best Answer

According to this link and this one, the attributes you mention were first introduced with Windows Server 2008; so, yes, upgrading the AD schema to 2008 level should fix your problem.

It's a totally safe operation, even if you don't plan to add any 2008 DC to the domain any time soon. Just ensure all your DCs are online, replication is properly working, the DC holding the Schema Master role is accessible and you have Enterprise Admin and Schema Admin rights.

BTW, you should run ADPREP on one of your existing 2003 domain controllers, not on a 2008 member server.

Related Topic