Prevent License Upgrade Policy

Download 0.85 Mb.
bet	5/5
Sana	26.12.2019
Hajmi	0.85 Mb.
	#5286

1 2 3 4 5

Prevent License Upgrade Policy

Computer Configuration/Administrative Templates/Windows Components/Terminal Services/Licensing

A license server attempts to provide the most appropriate Client Access License (CAL) for a connection. For example, a license server provides a Windows 2000 TS CAL token for clients connecting to a terminal server running Windows 2000 and a Windows Server 2003 Family Per Device TS CAL token for a connection to a terminal server running Windows Server 2003.

By default, this per-computer setting allows a license server to supply a Windows Server 2003 Family Device TS CAL token, if available, to a terminal server running Windows 2000 if there are no Windows 2000 TS CAL tokens available.

If the status is set to Enabled, when a terminal server running Windows 2000 requests a license, but no Windows 2000 TS CAL token is available, a temporary CAL is issued if the client has not already been issued a temporary CAL. Otherwise, no CAL is issued and the client is refused connection, unless the terminal server is within its grace period.

Note

This policy only applies to Device CAL tokens, as there is only one version of User CAL tokens.

License Server Security Group Policy

Computer Configuration/Administrative Templates/Windows Components/Terminal Services/Licensing

You can use this setting to control which servers are issued licenses. By default, a terminal server license server issues a license to any computer that requests one.

For example, this policy might be useful in a departmental deployment in which each department purchases its own TS CALs and terminal servers. This policy allow a department to control which terminal servers are able to request TS CAL tokens from their license server(s).

If the status is set to Enabled, the terminal server license Server grants licenses only to computers whose computer accounts are placed in the Terminal Services Computers local group. When the license server is a domain controller, this group is a domain local group.

Notes

1. The Terminal Services Computers group is empty by default. The terminal server license server does not grant licenses to any computers unless you explicitly populate this group.

2. The most efficient way to manage terminal server computer accounts is to create a global group containing the accounts of all terminal servers and license servers that must receive licenses. Then, place this global group into the local (or domain local) Terminal Services Computers group. This method allows a domain administrator to manage a single list of computer accounts.

3. To add a computer account to a group, open the Computer Management snap-in, navigate to the Properties page of the group, and click Add. On the Select Users, Computers, or Groups dialog box, click Object Types and then check Computers.

Administration

The primary tool used to manage the licensing service is the Terminal Server Licensing admin tool, which is installed by default. This tool is used to activate the license server, install licenses tokens, view the data contained in the license database, and generally administer the license server. The other tools, including the Terminal Server License Reporting tool, Terminal Server Client License Test tool and the Terminal Server License Server View tool are described below.

Terminal Server Licensing Tool

The Terminal Server Licensing tool provides for the administration of the license server. When started, it displays a list of all discoverable license servers (see Figure 2) and can be used to administer any of those servers from a single location.

Figure 2 Terminal Server Licensing tool

Selecting a license server allows it to be managed. Supported activities include:

Activating the license server
Installing license tokens
Viewing license issuance and availability details
Advanced options such as de-activating a license server

Many of the activities in the preceding list are related to communication with the Microsoft Clearinghouse. The centralized management capabilities of this tool simplify the process by allowing a single, Internet-connected site to provide these services for an enterprise.

Terminal Server License Reporting Tool

The Terminal Server License Reporting tool (LSREPORT.EXE) provided with the Microsoft Windows Server 2003 Resource Kit can be used to analyze the information contained in the license server database. It is a command-line utility that outputs the information from the license server’s database into a tab-delimited text file. The tool has been updated to include the client Hardware ID in the report which is useful for tracking licenses issued to particular client devices. The reporting tool can be used with the following parameters:

/F filename	Directs output to the written to a file name ”filename” (”filename” defaults to ’lsreport.txt”).
/D start [end]	Writes only license tokens that were issued between start and end (end defaults to the current date).
/T	Directs only temporary tokens to be written
/W Serverlist	Directs Hardware ID to be included in report (only for Windows Server 2003 license servers). A list of servers to query. If not specified, a list will be obtained from a domain controller.
/?	Prints a program summary to the screen.

Usage:

Lsreport [/F filename] [/D start [end]] [/T] [/?] [serverlist]

Examples:

Lsreport

Lsreport /T NTLS-1 NTLS2

Terminal Server Client License Test Tool

The Terminal Server Client License Test tool (TSTCST.EXE) provided with the Windows Server 2003 Resource Kit can be used to display details about the license token residing on a client device. It is a command-line utility that displays the following information by default:

Issuer
Scope
Issued to computer
Issued to user
License ID
Type/Version
Valid From
Expires On

By using the /A switch, the following additional information is displayed:

Server certificate version
Licensed product version
Hardware ID
Client platform ID
Company name

Terminal Server License Server Viewer Tool

The Terminal Server License Server Viewer tool (LSVIEW.EXE) provided with the Windows Server 2003 Resource Kit can be used to display the license servers that are discoverable on your network. It is a GUI–based utility that shows the name and type of each license server that it discovers. It also provides the ability to create a log file with advanced diagnostic information about the discovery process.

Preferred License Server WMI Scripts

Use the following WMI script to set a preferred license server:

AddLicenseServer.vbs

'***************************************************************************

' WMI VBscript to add a specified License server to Terminal server's registry

'***************************************************************************

if Wscript.arguments.count<1 then
Wscript.echo "Script requires one argument, the LicenseServerName"

Wscript.echo "e.g. cscript AddLicenseServer LicenseServerName"

Wscript.quit

end if
Dim strServer

strServer=Wscript.arguments.Item(0)
for each terminal in GetObject("winmgmts:{impersonationLevel=impersonate}").InstancesOf ("win32_TerminalServiceSetting")
result = terminal.AddDirectConnectLicenseServer (strServer)
WScript.Echo "Method returned result = " & result
if err <>0 then

WScript.Echo Err.Description, "0x" & Hex(Err.Number)

end if

Use the following WMI script to delete preferred license servers:

DeleteLicenseServer.vbs
'***************************************************************************

' WMI VBscript to add a specified License server to Terminal server's registry

'***************************************************************************

if Wscript.arguments.count<1 then
Wscript.echo "Script requires one argument, the LicenseServerName"

Wscript.echo "e.g. cscript DeleteLicenseServer LicenseServerName"

Wscript.quit

end if
Dim strServer

strServer=Wscript.arguments.Item(0)
for each terminal in GetObject("winmgmts:{impersonationLevel=impersonate}").InstancesOf ("win32_TerminalServiceSetting")
result = terminal.DeleteDirectConnectLicenseServer (strServer)
WScript.Echo "Method returned result = " & result
if err <>0 then

WScript.Echo Err.Description, "0x" & Hex(Err.Number)

end if

Use the following WMI script to query preferred license server settings:

QueryLicenseServers.vbs
'***************************************************************************

' WMI VBScript that queries the License servers configured for registry bypass.

' on the Terminal server

'***************************************************************************

for each Terminal in GetObject("winmgmts:{impersonationLevel=impersonate}").InstancesOf ("win32_TerminalServiceSetting")

WScript.Echo "The License Servers are = " & Terminal.DirectConnectLicenseServers

Glossary

Domain License Server – The scope of a domain license server is a domain or a workgroup.

Enterprise License Server – Enterprise license server is the default setting for a license server. Its scope is an Active Directory site.

License Code – A license code is a 25-character alphanumeric code that represents the type and number of licenses you are entitled to. The License Code comes as part of the Microsoft License Pack (MLP) packaging.

License Key – A license key consists of the digital certificate bits that represent a license. The license key for a TS CAL is stored locally on the client device.

License Key Pack – A license key pack is a digital representation of a group of license keys. License key packs are installed on the license server as a result of license installation.

License Key Pack ID – A license key pack ID is a 35-character alphanumeric representation of a license key pack and is used to install licenses when using the WWW or Phone method.

License Server – A license server is a computer that runs a Windows Server 2003 operating system that has been configured with the Terminal Server Licensing service.

License Server Activation – License server activation is the process of assigning a server a limited-use X-509 certificate for the purpose of issuing license keys.

License Server ID – A license server ID is a 35-character alphanumeric representation of the certificate of a license server, which is used to obtain a license key pack by means of a license installation.

Summary

The Terminal Server Licensing service provides a mechanism to manage and allocate TS CAL tokens. It works in conjunction with terminal server, terminal server clients, and an automated clearinghouse to manage the licensing process. This facility simplifies the license tracking process for system administrators.

For More Information

For the latest information on the Windows Server 2003 family, Terminal Server, and the Terminal Server Licensing service, visit:

Windows Server 2003 Terminal Services

http://www.microsoft.com/windowsserver2003/technologies/terminalservices/ or http://go.microsoft.com/fwlink/?LinkId=18340

Microsoft Windows Server 2003

http://www.microsoft.com/windowsserver2003 or http://go.microsoft.com/fwlink/?LinkId=17533

Windows Server 2003 Terminal Server Licensing Issues and Requirements for Deployment

http://support.microsoft.com/?id=823313 or http://go.microsoft.com/fwlink/?LinkId=23444

Terminal Services FAQ

http://www.microsoft.com/windowsserver2003/community/centers/terminal/terminal_faq.mspx#XSLTfaqSection121123121120120 or http://go.microsoft.com/fwlink/?LinkId=23445

For additional information about the deployment and management of the Terminal Server Licensing service, see the Windows Server 2003 Resource Kit and the Deployment Planning Guide in the Microsoft® Windows® Server 2003 Resource Kit at http://www.microsoft.com/windowsserver2003/techinfo/reskit/deploykit.mspx or http://go.microsoft.com/fwlink/?LinkId=4298

Katalog: pdf
pdf -> Employee Internet Use Monitoring and Filtering Policy
pdf -> Consumer Protection "e-commerce Liability"
pdf -> Quality management review procedure
pdf -> Verordnung für Physiotherapie Angaben zur Person

Download 0.85 Mb.

1 2 3 4 5

Download 0.85 Mb.