The remote desktop authorization server cannot update the license attribute of the user 'Administrator' in the Active Directory domain 'XXXX.cn. Make sure that the computer account of the license server is a member of the terminal server license server group in the Active Directory domain 'XXXX.cn. Restart the Terminal Services Licensing service on the Terminal Services license server. To perform these tasks, refer to the following sections. Note: If the license server is installed on a domain controller, the Network Service account also needs to be a member of the Terminal Server License Servers group. One or more RD Licensing certificates has expired. Please re-register. And: Log Name: System Source: Microsoft-Windows-TerminalServices-Licensing Date: 5:50:42 PM Event ID: 4105 Task Category: None Level: Warning Keywords: Classic User: N/A Computer: RDSServer.DOMAIN.LOCAL Description.
- Terminal Services Licensing 4105 Community Care
- Terminal Services Licensing 4105 Provider
- Terminalservices-licensing 4105 Windows Server 2016
Terminal services licensing and server redudancy 8 posts. Posted: Wed Apr 18, 2007 2:46 pm. You bring up a new TS Licensing server and point the Terminal Servers to that (unless they. TerminalServices-Licensing 4105 – The Terminal Services license server cannot update the license attributes for user in Active Directory Domain. Posted on May 6, 2016 April 18, 2017 Author HeelpBook.
Background
- Windows Server 2008 R2 Domain
- Windows Server 2008 R2 Remote Desktop Server with following roles:
- Remote Desktop Session Host
- Remote Desktop Licensing (User CALs)
- Remote Desktop Web Access
Issue
Every time non-administrator user logs on via Remote Desktop connection, following Warning is logged in System Logs:
Event ID: 4105
Level: Warning
Description:
The Remote Desktop license server cannot update the license attributes for user '<user.name>' in the Active Directory Domain '<domain.local>'. Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain 'domain.local'.
If the license server is installed on a domain controller, the Network Service account also needs to be a member of the Terminal Server License Servers group.
If the license server is installed on a domain controller, after you have added the appropriate accounts to the Terminal Server License Servers group, you must restart the Remote Desktop Licensing service to track or report the usage of RDS Per User CALs.
Win32 error code: 0x80070005
Level: Warning
Description:
The Remote Desktop license server cannot update the license attributes for user '<user.name>' in the Active Directory Domain '<domain.local>'. Ensure that the computer account for the license server is a member of Terminal Server License Servers group in Active Directory domain 'domain.local'.
If the license server is installed on a domain controller, the Network Service account also needs to be a member of the Terminal Server License Servers group.
If the license server is installed on a domain controller, after you have added the appropriate accounts to the Terminal Server License Servers group, you must restart the Remote Desktop Licensing service to track or report the usage of RDS Per User CALs.
Win32 error code: 0x80070005
Cause
Microsoft KB2030310 article list 3 possible reasons for this behaviour:
- The license server is not a member of the Terminal Server License Servers group in the domain in which the users reside.
- The license server is installed on a domain controller, and the Network Service account is not a member of the Terminal Server License Servers group.
- If the user accounts existed before the domain was upgraded to Windows Server 2003, the Terminal Server License Servers group might be missing in the discretionary access control list (DACL) of the user objects in Active Directory directory service. Or, the group is in the DACL, but the group does not have permissions to update the Terminal Services Licensing information for the user account.
After checking that first 2 reasons do not apply I assumed that issue was cased by domain existence prior to Windows Server 2003.
Resolution
Issue was resolved by adding read/write permissions to the Terminal Server License Servers group for all users.
- Open Active Directory Users and Computers
- Right click on the domain > Delegate Control > Next
- Add Terminal Server License Servers group > Next
- Select Create a custom task to delegate > Next
- Select Only the following objects in the folder, scroll down and check User objects > Next
- Check General, scroll down and check Read and Write Terminal Server license server > Next > Finish
View the discussion thread.
Recently, a large number of event records of remote desktop 4105 Warning message,Follows:
The remote desktop authorization server cannot be an Active Directory domain “xxx.com.tw” Of users “bill” Update authorization attributes。Please make sure the computer account of the authorization server is an Active Directory domain “xxx.com.tw” Member of the Terminal Server License Servers group。
There are two users who appeared this message,And they can still log in to the remote desktop server,However, the authorized use of these two accounts will not be recorded in the 'RD Authorized Administrator'。After checking the information online,It seems that because the two accounts are in Windows 2000 The period has been established,After the domain upgrade,Some security communication problems caused,So through some settings,Allow the account to correctly obtain the relevant permissions for remote authorization。
Terminal Services Licensing 4105 Community Care
【Solution】
◎ Open 'Active Directory Users and Computers',Right click on the domain,Select 【Delegation Control】。
◎ Select 【New】。
◎ Input “terminal server license servers“,Press 【OK】。
◎ After the next step,Select [Create an automatic job to delegate],Then press 【Next】。
◎ Select [Only the following objects in this folder],Check [User Object],Uncheck all others,And click 【Next】。
◎ Choose 【General】,Tick [Read and Write Terminal Server Authorization Server],Click 【Next】。
◎ Click 【Finish】。
◎ Back to the 'Active Directory Users and Computers' screen,Under 'View' check 'Advanced Features'。
◎ Right click on the target account,Select 【Content】。
◎ Under the 'Security' tab,Click on the 'Terminal Sever License Servers' role,Make sure that the permissions of 'Read Terminal Server Authorization Server' and 'Write Terminal Server Authorization Server' are [Allow]。
After completing the steps of 'delegating work' in my environment,Each user will automatically have the permissions for the last step,So just check。After completing the above actions,Will never appear again 4105 Error message,And the authorization record of the user will also appear in the 'RD Authorization Manager'。
【Fan Wai Pian 1】
Terminal Services Licensing 4105 Provider
After creating the remote desktop authorization server,Also encountered the same message,And the user who showed the warning message at that time,All from another domain B (Trusted),Therefore, the problem is actually solved as the second half of the message,Just add the computer name of the authorized server to the 'Terminal Sever License Servers' group of domain B (I originally only added it to domain A)。
【Fanwai Part Two】
The domain B account recently occurred when connecting to the remote desktop,The error message 'Access denied' will pop up,But the server's record can't see any abnormal error message,Later, after trying to remove the authorized server computer in the domain B 'Terminal Sever License Servers' group,User in domain B can log in,Then add the computer back,Also normal。
【參考連結】
- FIX Event ID 4105: Remote Desktop license server cannot update the license attributes for user in Active Directory Domain. – wintips.org – Windows Tips & How-tos
Similar subject of this article: